CVE-2014-125114

🗓️ 25 Jul 2025 15:52:16Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 36 Views🌐 WEB

Vulnerability in i-Ftp 2.20 allows remote code execution via crafted Schedule.xml file.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2014-125114	29 May 201815:50	–	circl
CNNVD	Pablo Software Solutions i-Ftp 安全漏洞	25 Jul 202500:00	–	cnnvd
Cvelist	CVE-2014-125114 i-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow	25 Jul 202515:52	–	cvelist
EUVD	EUVD-2014-9807	7 Oct 202500:30	–	euvd
Metasploit	i-FTP Schedule Buffer Overflow	6 Nov 201400:00	–	metasploit
NVD	CVE-2014-125114	25 Jul 202516:15	–	nvd
Positive Technologies	PT-2025-31205 · Undefined · Undefined	25 Jul 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2014-125114: Stack-based Buffer Overflow	25 Jul 202500:00	–	rapid7
RedhatCVE	CVE-2014-125114	27 Jul 202516:14	–	redhatcve
Vulnrichment	CVE-2014-125114 i-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow	25 Jul 202515:52	–	vulnrichment

Vulners

Node

i-ftp i-ftpMatch2.20

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "Schedule.xml"
    ],
    "product": "i-Ftp",
    "vendor": "i-Ftp",
    "versions": [
      {
        "status": "affected",
        "version": "2.20"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/iftp_schedule_bof.rb
exploit-db	www.exploit-db.com/exploits/35671
exploit-db	www.exploit-db.com/exploits/35177
vulncheck	www.vulncheck.com/advisories/iftp-schedule-stack-based-buffer-overflow

Parameter	Position	Path	Description	CWE
Time	nested	i-FTP/Schedule.xml	Stack-based buffer overflow in i-Ftp v2.20 caused by a long Time attribute in Schedule.xml during scheduled download parsing; crafted Schedule.xml can trigger arbitrary code execution or a crash.	CWE-20, CWE-121

17 Jun 2026 00:04Current

7.7High risk

Vulners AI Score7.7

CVSS 48.4

EPSS0.0071

SSVC