freeFTPd up to 1.0.10 PASS Command stack-based overflow

Summaryinfo

A vulnerability, which was classified as critical, has been found in freeFTPd up to 1.0.10. This vulnerability affects unknown code of the component PASS Command Handler. The manipulation leads to stack-based overflow. This vulnerability is documented as CVE-2013-10042. The attack can be initiated remotely. Additionally, an exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, has been found in freeFTPd up to 1.0.10. This issue affects an unknown functionality of the component PASS Command Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.

The weakness was released by Wireghoul. It is possible to read the advisory at raw.githubusercontent.com. The identification of this vulnerability is CVE-2013-10042 since 07/30/2025. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available.

The exploit is available at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (27747). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• File Transfer Software

Name

• freeFTPd

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.0.3
• 1.0.4
• 1.0.5
• 1.0.6
• 1.0.7
• 1.0.8
• 1.0.9
• 1.0.10

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion