CVE-2011-3976

Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script.

• CWE-119

• http://secunia.com/advisories/46099Vendor Advisory
• http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/Exploit, URL Repurposed
• http://www.exploit-db.com/exploits/17876Exploit
• http://www.kb.cert.org/vuls/id/440219US Government Resource
• http://www.securityfocus.com/bid/49707Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69962
• http://secunia.com/advisories/46099Vendor Advisory
• http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/Exploit, URL Repurposed
• http://www.exploit-db.com/exploits/17876Exploit
• http://www.kb.cert.org/vuls/id/440219US Government Resource
• http://www.securityfocus.com/bid/49707Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69962

Published

Oct 4, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3970libxslt, as used in Google Chrome before 17.0.963.46, allows…
• CVE-2011-3971Use-after-free vulnerability in Google Chrome before 17.0.96…
• CVE-2011-3972The shader translator implementation in Google Chrome before…
• CVE-2011-3973cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x bef…
• CVE-2011-3974Integer signedness error in the decode_residual_inter functi…
• CVE-2011-3975A certain HTC update for Android 2.3.4 build GRJ22, when the…
• CVE-2011-3977Unspecified vulnerability in nxconfigure.sh in NoMachine NX …
• CVE-2011-3978Multiple cross-site scripting (XSS) vulnerabilities in Light…
• CVE-2011-3979Cross-site scripting (XSS) vulnerability in ztemp/view_compi…
• CVE-2011-3980Unspecified vulnerability in the Drag Drop Mass Upload (ameo…
• CVE-2011-3981PHP remote file inclusion vulnerability in actions.php in th…
• CVE-2011-3982The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 …