What is CVE-2010-20115?

CVE-2010-20115 is a vulnerability in Arcane Software Vermillion FTP Daemon, classified under Incorrect Type Conversion or Cast. Published 2025-08-21.

Is CVE-2010-20115 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Arcane Software Vermillion FTP Daemon

CVE-2010-20115

Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attacker to manipulate stack memory and potentially execute arbitrary code. Exploitation requires direct access to the FTP service and is constrained by a single execution attempt if the daemon is installed as a Windows service.

Published 2025-08-21 · last modified 2026-06-16.

EPSS exploit prediction

EPSS: 0.009 (58.8th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 59th percentile — 58.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000

Affected products

Arcane Software Vermillion FTP Daemon — versions 0

Weakness classification (CWE)

Public proof-of-concept exploits

rapid7/metasploit-framework

References

raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/w… (exploit)
www.exploit-db.com/exploits/11293 (exploit)
www.broadcom.com/support/security-center/attacksignatures/detail (third-party-advisory)
www.juniper.net/us/en/threatlabs/ips-signatures/detail.FTP:EXPLOIT:VERMILLION-P… (third-party-advisory)
web.archive.org/web/20100416140657/http://www.global-evolution.info/news/files/… (technical-description, exploit)
web.archive.org/web/20100213162028/http://www.softsea.com/review/Vermillion-FTP… (product)
www.vulncheck.com/advisories/vermillion-ftp-daemon-port-command-memory-corrupti… (third-party-advisory)

Frequently asked questions

What is CVE-2010-20115?: CVE-2010-20115 is a vulnerability in Arcane Software Vermillion FTP Daemon, classified under Incorrect Type Conversion or Cast. Published 2025-08-21.
Is CVE-2010-20115 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.