Read the docs

Ftpshell

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ftpshell records in CISA KEV

No Ftpshell vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Ftpshell Server · all components

Priority HIGH 72

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00218 Published 2026-03-22 No fix listed CWE-787
Priority MEDIUM 64

FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00225 Published 2026-03-30 No fix listed CWE-787
Priority MEDIUM 49

Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (ak…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05859 Published 2009-01-29 No fix listed CWE-119
Open these records in search →