acftp vulnerabilities

Products

• acftp 3

Latest acftp CVEs

Newest publication first

1. CVE-2002-2417 acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and pos...

   Published 2007-11-01

   High·CVSS 10.0 EPSS 4.2% Public exploit

   acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.

2. CVE-2006-6775 acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.

   Published 2006-12-27

   Low·CVSS 3.5 EPSS 2.0% PoC

   acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.

3. CVE-2006-2242 acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USER command.

   Published 2006-05-09

   Medium·CVSS 5.0 EPSS 3.8% PoC

   acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USER command.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.