What is CVE-2011-10029?

CVE-2011-10029 is a vulnerability in Flexbyte Software Solar Ftp Server, classified under Use of Externally-Controlled Format String. Published 2025-08-20.

Is CVE-2011-10029 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Flexbyte Software Solar Ftp Server

CVE-2011-10029

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.

EPSS: 0.007 (50.3th percentile) — read the EPSS interpretation.

Affected products

Flexbyte Software Solar Ftp Server — versions 0

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

Public proof-of-concept exploits

rapid7/metasploit-framework

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (vendor-advisory, patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2011-10029?: CVE-2011-10029 is a vulnerability in Flexbyte Software Solar Ftp Server, classified under Use of Externally-Controlled Format String. Published 2025-08-20.
Is CVE-2011-10029 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.