EUVD-2010-5310

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

EasyFTP Server up to 1.7.0.11 has a CWD parsing stack overflow enabling unauthenticated remote code execution; anonymous access by default; fixed in 1.7.0.12; renamed UplusFtp.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2010-20121	21 Aug 202520:10	–	attackerkb
Circl	CVE-2010-20121	29 May 201815:50	–	circl
CNNVD	EasyFTP 安全漏洞	21 Aug 202500:00	–	cnnvd
CVE	CVE-2010-20121	21 Aug 202520:10	–	cve
Cvelist	CVE-2010-20121 EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow	21 Aug 202520:10	–	cvelist
NVD	CVE-2010-20121	21 Aug 202520:15	–	nvd
Positive Technologies	PT-2025-34289 · Undefined · Undefined	21 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2010-20121	23 Aug 202520:13	–	redhatcve
Vulnrichment	CVE-2010-20121 EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow	21 Aug 202520:10	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "0c5f1a8c-c6bd-327c-9717-b5b548efd901",
        "vendor": {
          "name": "KMiNT21 Software"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "25523bf4-9e7d-383b-b05f-815544d80079",
        "product": {
          "name": "EasyFTP Server"
        },
        "product_version": "* ≤1.7.0.11"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/bugtraq/2010/Feb/202
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb
paulmakowski	www.paulmakowski.wordpress.com/2010/02/28/increasing-payload-size-w-return-address-overwrite/
exploit-db	www.exploit-db.com/exploits/12312
exploit-db	www.exploit-db.com/exploits/16737
exploit-db	www.exploit-db.com/exploits/11668
exploit-db	www.exploit-db.com/exploits/14402
vulncheck	www.vulncheck.com/advisories/easyftp-server-cwd-command-stack-buffer-overflow
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

CVSS 3.19.8

EPSS0.68643

SSVC