CVE-2011-10029
HIGHSolar FTP Server - DoS
Title source: llmDescription
Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.
Exploits (2)
metasploit
WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/solarftp_user.rb
References (5)
Scores
CVSS v4
8.7
EPSS
0.4884
EPSS Percentile
97.8%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Details
CWE
CWE-134
Status
published
Products (1)
Flexbyte Software/Solar FTP Server
< 2.1.1
Published
Aug 20, 2025
Tracked Since
Feb 18, 2026