The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command.
Max CVSS
8.5
EPSS Score
1.02%
Published
2007-07-15
Updated
2017-07-29
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
Max CVSS
7.5
EPSS Score
11.01%
Published
2013-08-09
Updated
2017-08-29
NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.
Max CVSS
5.0
EPSS Score
0.81%
Published
2001-09-20
Updated
2017-10-10
3 vulnerabilities found