Read the docs
TI-2010-05054 Aliases CVE-2010-20007GHSA-gfwh-g6qc-3p4p

Seagull FTP v3.3 Build 409 Stack Buffer Overflow

Priority HIGH 72CWE-121Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long filename, the application fails to properly validate input length, resulting in a buffer overflow that overwrites the Structured Exception Handler (SEH). This may allow remote attackers to execute arbitrary code on the client system. This product line was discontinued and users were advised to use BlueZone Secure FTP instead, at the time of disclosure.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00585 48th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Rocket SoftwareSeagull FTP Clientup to 3.3 Build 409—No fix listedCNA
  • Seagull FTP Client VendorRocket Software Affected up to 3.3 Build 409 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-20007
  2. 2026-10-03 Alias added: GHSA-gfwh-g6qc-3p4p

References

Exploit 3

Other 2

  • TI-2023-13042 Stack buffer overflow in UniRPC's udadmin_server service CVSS 3.1CRITICAL 9.8
  • TI-2025-37242 Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at… CVSS 4.0CRITICAL 9.4
  • TI-2025-20081 TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to… CVSS 3.1CRITICAL 9.8
  • TI-2023-13041 Heap buffer overflow in unirpcd CVSS 3.1CRITICAL 9.8
  • TI-2022-16758 An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1… CVSS 3.1CRITICAL 9.8
  • TI-2014-03187 Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in… CVSS 2.0HIGH 10.0
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences