QwikSec

Security Database

CVE

CWE

Training

CVE-2013-10042

Published: Jul 31, 2025

Modified: May 15, 2026

PUBLISHED

Description

A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.

Vendor	Product	Versions
freeFTPd	freeFTPd	affected `0 - <= 1.0.10`

Weaknesses (CWE)

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pass.rb

exploit

https://www.exploit-db.com/exploits/27747

exploit

https://www.vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

CVE-2013-10042 - Security Vulnerability | QwikSec