Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2012-10035

Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TurboSoft, Inc. TurboFTP Server

Default version status: unaffected

  • 1.30.823affected
  • 1.30.826affected

References