EasyFTP LIST Command denial of service

published 2024-01-15 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-16339

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 6.8%; EPSS 6.8% chance of exploitation in 30 days, percentile 94%
public exploits: 1; Metasploit

A vulnerability, which was classified as problematic, has been found in EasyFTP 1.7.0. This issue affects some unknown processing of the component LIST Command Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250715.

Timeline

2010-07-05 First public exploit (Metasploit exploit/windows/ftp/easyftp_list_fixret)
2024-01-15 Published

CISA SSVC

Exploitation: Proof of concept is public
Automatable: yes
Technical impact: partial
Assessed: 18 mo ago (2025-05-08)

Exploit prediction

6.82% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/windows/ftp/easyftp_list_fixret EasyFTP Server LIST Command Stack Buffer Overflow metasploit exploit, great rank, 2010-07-05
packetstormsecurity.com https://packetstormsecurity.com/files/94905/EasyFTP-1.7.0.x-Denial-Of-Service.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CNA	3.0	5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CNA	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P
NVD	3.1	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

n/a EasyFTP

Classification

Weakness

CWE-404 Improper Resource Shutdown or Release

References

packetstormsecurity.com /files/94905/EasyFTP-1.7.0.x-Denial-Of-Service.html
exploit, third-party-advisory, vdb-entry
vuldb.com /?id.250715
vdb-entry, third-party-advisory
vuldb.com /?ctiid.250715
signature, permissions-required, third-party-advisory

Sources

CVE List CVE-2024-0546
NVD CVE-2024-0546

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary