Read the docs
TI-2010-05067 Aliases CVE-2010-20113GHSA-2jmq-6fx4-r49q

EasyFTP Server list.html path Stack Buffer Overflow

Priority HIGH 75CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the stack, potentially corrupting control flow structures. The vulnerability is exposed through the embedded web server and does not require authentication due to default anonymous access. The issue was resolved in version 1.7.0.12, after which the product was renamed to UplusFtp.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.02317 83rd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KMiNT21 SoftwareEasyFTP Serverup to 1.7.0.11—No fix listedCNA
  • EasyFTP Server VendorKMiNT21 Software Affected up to 1.7.0.11 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:easyftp_server_project:easyftp_server:*:*:*:*:*:*:*:*before 1.7.0.12VulnerableEasyftp Server Project
  • cpe:2.3:a:easyftp_server_project:easyftp_server:*:*:*:*:*:*:*:* Versions before 1.7.0.12 Vulnerable ·Easyftp Server Project

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-20113
  2. 2026-10-03 Alias added: GHSA-2jmq-6fx4-r49q

References

Exploit 2

  • TI-2010-05072 EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow CVSS 4.0CRITICAL 9.3
  • TI-2005-00517 Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to… CVSS 2.0HIGH 7.5
  • TI-2005-04286 Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary… CVSS 2.0HIGH 7.5
  • TI-2005-00584 Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command. CVSS 2.0HIGH 7.5
  • TI-2006-02124 Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial… CVSS 2.0MEDIUM 6.4
  • TI-2005-01407 Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a… CVSS 2.0MEDIUM 5.0
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences