CVE-2012-10035 | Turbo FTP Server versions 1.30.823 and 1.30.826 contain a bu… | CVSS 10.0 CRITICAL

Description

Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges.

Metadata

CVE ID: CVE-2012-10035
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2025-08-05 17:27 UTC
Published: 2025-08-05 20:05 UTC
Last updated: 2026-04-07 14:02 UTC
Primary CWE: CWE-120
CWE-120 Buffer Copy without Checking Size of Input ('Classic…
Vendor / Product: TurboSoft, Inc. / TurboFTP Server
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
TurboSoft, Inc.	TurboFTP Server	—	1.30.823, 1.30.826

Weakness (CWE)

CWE	Source	Description
CWE-120	cna	CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References (3)