bftpd vulnerabilities

Products

• bftpd 3

Latest bftpd CVEs

Newest publication first

1. CVE-2025-11947 bftpd Configuration File options.c expand_groups heap-based overflow

   Published 2025-10-19

   Low·CVSS 2.0 EPSS 0.19%

   A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Att...

2. CVE-2007-2051 Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable.

   Published 2007-04-16

   Medium·CVSS 5.0 EPSS 1.4%

   Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable.

3. CVE-2007-2010 Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service (daemon crash) via a (1) get or (2) mget command.

   Published 2007-04-12

   Medium·CVSS 6.8 EPSS 1.6%

   Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service (daemon crash) via a (1) get or (2) mget command.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.