turbosoft vulnerabilities

Products

• turboftp 2
• TurboFTP Server 1

Latest turbosoft CVEs

Newest publication first

1. CVE-2012-10035 Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow

   Published 2025-08-05

   Critical·CVSS 10.0 EPSS 1.7% Framework module

   Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privilege...

2. CVE-2007-1080 Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1) long filename in a response to a LIST command, and (2) a long response to a CW...

   Published 2007-02-22

   High·CVSS 7.8 EPSS 3.7% PoC

   Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1) long filename in a response to a LIST command, and (2) a long response to a CWD command.

3. CVE-2007-1075 TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline characters.

   Published 2007-02-22

   High·CVSS 7.8 EPSS 3.1% PoC

   TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline characters.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.