CVE-2011-10029

HIGH

Solar FTP Server - DoS

Title source: llm

Description

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.

Exploits (2)

exploitdb WORKING POC VERIFIED
by x000 · perldoswindows
https://www.exploit-db.com/exploits/16204
metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/solarftp_user.rb

Scores

CVSS v4 8.7
EPSS 0.4884
EPSS Percentile 97.8%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Details

CWE
CWE-134
Status published
Products (1)
Flexbyte Software/Solar FTP Server < 2.1.1
Published Aug 20, 2025
Tracked Since Feb 18, 2026