CVE-2010-20121

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed “UplusFtp.”

• CWE-121

• https://paulmakowski.wordpress.com/2010/02/28/increasing-payload-size-w-return-address-overwrite/Exploit, Third Party Advisory
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rbExploit
• https://seclists.org/bugtraq/2010/Feb/202Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/11668Exploit, VDB Entry
• https://www.exploit-db.com/exploits/12312Exploit, VDB Entry
• https://www.exploit-db.com/exploits/14402Exploit, VDB Entry
• https://www.exploit-db.com/exploits/16737Exploit, VDB Entry
• https://www.vulncheck.com/advisories/easyftp-server-cwd-command-stack-buffer-overflowThird Party Advisory
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rbExploit
• https://seclists.org/bugtraq/2010/Feb/202Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/11668Exploit, VDB Entry
• https://www.exploit-db.com/exploits/12312Exploit, VDB Entry
• https://www.exploit-db.com/exploits/14402Exploit, VDB Entry
• https://www.exploit-db.com/exploits/16737Exploit, VDB Entry

Published

Aug 21, 2025

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-20116Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-20117Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-20118Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-20119CommuniCrypt Mail versions up to and including 1.16 contains…8.6
• CVE-2010-2012SQL injection vulnerability in function.php in MigasCMS 1.1,…
• CVE-2010-20120Maple versions up to and including 13's Maplet framework all…8.4
• CVE-2010-20122Xftp FTP Client version up to and including 3.0 (build 0238)…9.3
• CVE-2010-20123Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulner…8.4
• CVE-2010-20124Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-2013Cross-site scripting (XSS) vulnerability in cp/edit_email.ph…
• CVE-2010-2014Cross-site scripting (XSS) vulnerability in cp/list_content.…
• CVE-2010-2015Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow…