Vulnerabilities

TI-2024-01105 CVE-2024-1190 · GHSA-j3pp-77jw-4qv6

Global Scape CuteFTP denial of service

MEDIUM 58

A vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00303 Published 2024-02-02 No fix listed CWE-404

TI-2009-03321 CVE-2009-3483 · GHSA-2893-36vg-x3vj

Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP…

MEDIUM 48

Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows user-assisted remote attackers to cause a denial of service (memory corruption) or…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04683 Published 2009-09-30 No fix listed CWE-119

TI-2008-02654 CVE-2008-2779 · GHSA-53cx-mxm9-g44r

Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4…

MEDIUM 45

Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 allows remote FTP servers to create or overwrite arbitrary files via ..\ (dot dot backslash)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02624 Published 2008-06-19 No fix listed CWE-22

TI-2003-01161 CVE-2003-1261 · GHSA-xfmj-3h76-xr99

Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service…

LOW 12

Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash) by copying a long URL into a clipboard.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00485 Published 2005-11-16 No fix listed

TI-2003-01160 CVE-2003-1260 · GHSA-h56m-2v87-fv2w

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

MEDIUM 45

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.08748 Published 2005-11-16 No fix listed

TI-2004-01031 CVE-2004-1136 · GHSA-9gfv-rpw5-mwc9

Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote…

LOW 25

Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) via large replies to FTP commands.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01111 Published 2004-12-08 No fix listed

TI-2000-00084 CVE-2000-0084 · GHSA-2c8m-gphg-q96w

CuteFTP uses weak encryption to store password information in its tree.dat file.

LOW 24

CuteFTP uses weak encryption to store password information in its tree.dat file.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.00877 Published 2000-02-04 No fix listed

Vulnerabilities

Filters

Global Scape CuteFTP denial of service

Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP…

Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4…

Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service…

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote…

CuteFTP uses weak encryption to store password information in its tree.dat file.