CVE-2013-10042

Name of the Vulnerable Software and Affected Versions freeFTPd versions 1.0.10 and earlier

Description A stack-based buffer overflow exists due to improper handling of the FTP PASS command. The application does not validate the length of the input password string, leading to memory corruption. This can result in a denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.