cooolsoft personal ftp server vulnerabilities

Latest cooolsoft personal ftp server CVEs

Newest publication first

1. CVE-2003-0271 Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.

   Published 2003-05-09

   High·CVSS 7.5 EPSS 3.9%

   Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.

2. CVE-2002-1545 CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.

   Published 2003-03-18

   Medium·CVSS 5.0 EPSS 1.3%

   CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.

3. CVE-2002-1544 Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (...

   Published 2003-03-18

   Medium·CVSS 6.4 EPSS 1.6%

   Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.