CVE-2011-10005

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	EasyFTP	1.7.0.2

References

https://vuldb.com/?ctiid.250716Permissions Required, Third Party Advisory
https://vuldb.com/?id.250716Permissions Required, Third Party Advisory
https://www.exploit-db.com/exploits/17354Exploit, Third Party Advisory, VDB Entry
https://vuldb.com/?ctiid.250716Permissions Required, Third Party Advisory
https://vuldb.com/?id.250716Permissions Required, Third Party Advisory
https://www.exploit-db.com/exploits/17354Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jan 16, 2024
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-100066.1A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the fi CVE-2011-100078.8File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle CVE-2011-100088.6A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files c CVE-2011-100098.7S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing at CVE-2011-10014.3dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a CVE-2011-100109.4QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file pat CVE-2011-1001110.0WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POS CVE-2011-100128.4NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configura CVE-2011-1001310.0Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic CVE-2011-100148.7GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed s CVE-2011-100159.3Cytel Studio version 9.0 and earlier is vulnerable to a stack-based buffer overflow triggered by parsing a malformed .CY3 file. The vulnerab CVE-2011-100169.3Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. T