critical9.3Public exploit code
CVE-2010-2620
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR, or other commands…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Open-FTPD 1.2 - Arbitrary File Upload (Metasploit)2013-08-13 · remote · windows · Verified
- (Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Authentication Bypass / Directory Traversal SAM Retrieval2013-08-07 · remote · windows · Verified
- (Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Full System Access2010-06-18 · remote · windows · Verified
Impact
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR, or other commands without performing the required login steps first.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Ftpd | Open-Ftpd | through 1.2 Version 1.0 |