Buffer overflow in Freefloat Ftp Server
CVE-2012-10023
A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitra…
Vulnerability class: Buffer Overflow
EPSS: 0.805 (99.2th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/w… (exploit)
- www.exploit-db.com/exploits/23243 (exploit)
- my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd (third-party-advisory)
- www.exploit-db.com/exploits/15689 (exploit)
- web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/ (technical-description, exploit)
- web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php (product)
- www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow (third-party-advisory)
Frequently asked questions
- What is CVE-2012-10023?
- CVE-2012-10023 is a vulnerability in Freefloat Ftp Server, classified under Stack-based Buffer Overflow. Published 2025-08-05.
- Is CVE-2012-10023 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.