CVE-2011-3976
AmmSoft ScriptFTP 3.3 - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/17948
exploitdb
WORKING POC
VERIFIED
by modpr0be · pythonremotewindows
https://www.exploit-db.com/exploits/17876
metasploit
WORKING POC
GOOD
by modpr0be · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/scriptftp_list.rb
References (6)
Scores
EPSS
0.6626
EPSS Percentile
98.5%
Details
CWE
CWE-119
Status
published
Products (1)
ammsoft/scriptftp
3.3
Published
Oct 04, 2011
Tracked Since
Feb 18, 2026