Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2012-10023
PUBLISHED
More InfoOfficial Page
Assigner-VulnCheck
Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10
View Known Exploited Vulnerability (KEV) details
Published At-05 Aug, 2025 | 20:02
Updated At-07 Apr, 2026 | 14:02
Rejected At-
▼CVE Numbering Authority (CNA)
FreeFloat FTP Server USER Command Buffer Overflow

A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.

Affected Products
Vendor
FreeFloat
Product
FTP Server
Modules
  • ASCII Command Handler (USER)
Default Status
unknown
Versions
Affected
  • *
Problem Types
TypeCWE IDDescription
CWECWE-121CWE-121 Stack-based Buffer Overflow
Type: CWE
CWE ID: CWE-121
Description: CWE-121 Stack-based Buffer Overflow
Metrics
VersionBase scoreBase severityVector
4.06.9MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Version: 4.0
Base score: 6.9
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-100CAPEC-100 Overflow Buffers
CAPEC ID: CAPEC-100
Description: CAPEC-100 Overflow Buffers
Solutions
Configurations
Workarounds
Exploits
Credits
finder
D35m0nd142
finder
0v3r
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_user.rb
exploit
https://www.exploit-db.com/exploits/23243
exploit
https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd
third-party-advisory
https://www.exploit-db.com/exploits/15689
exploit
https://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/
technical-description
exploit
https://web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php
product
https://www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow
third-party-advisory
Hyperlink: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_user.rb
Resource:
exploit
Hyperlink: https://www.exploit-db.com/exploits/23243
Resource:
exploit
Hyperlink: https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd
Resource:
third-party-advisory
Hyperlink: https://www.exploit-db.com/exploits/15689
Resource:
exploit
Hyperlink: https://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/
Resource:
technical-description
exploit
Hyperlink: https://web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php
Resource:
product
Hyperlink: https://www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow
Resource:
third-party-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.exploit-db.com/exploits/23243
exploit
Hyperlink: https://www.exploit-db.com/exploits/23243
Resource:
exploit
Details not found