CVE-2011-5166

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.

• CWE-119

• http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.htmlExploit
• http://secunia.com/advisories/45907Vendor Advisory
• http://www.exploit-db.com/exploits/17819Exploit
• http://www.exploit-db.com/exploits/17856Exploit
• http://www.exploit-db.com/exploits/17870Exploit
• http://www.exploit-db.com/exploits/18089Exploit
• http://www.osvdb.org/75147
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69557
• http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.htmlExploit
• http://secunia.com/advisories/45907Vendor Advisory
• http://www.exploit-db.com/exploits/17819Exploit
• http://www.exploit-db.com/exploits/17856Exploit
• http://www.exploit-db.com/exploits/17870Exploit
• http://www.exploit-db.com/exploits/18089Exploit
• http://www.osvdb.org/75147
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69557

Published

Sep 15, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-5160Cross-site scripting (XSS) vulnerability in setup.php in Ope…
• CVE-2011-5161Unrestricted file upload vulnerability in the patient photog…
• CVE-2011-5162Stack-based buffer overflow in GOM Player 2.1.33.5071 allows…
• CVE-2011-5163Buffer overflow in an unspecified third-party component in t…
• CVE-2011-5164Stack-based buffer overflow in VanDyke Software AbsoluteFTP …
• CVE-2011-5165Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 a…
• CVE-2011-5167Heap-based buffer overflow in the SetDevNames method of the …
• CVE-2011-5168SQL injection vulnerability in user.php in Banana Dance befo…
• CVE-2011-5169SQL injection vulnerability in sgms/reports/scheduledreports…
• CVE-2011-5170Stack-based buffer overflow in Castillo Bueno Systems CCMPla…
• CVE-2011-5171Multiple stack-based buffer overflows in CyberLink Power2Go …
• CVE-2011-5172Stack-based buffer overflow in StoryBoard Quick 6 Build 3786…