Every CVE Search/ Get API key

CVE-2003-0561

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code...

7.5 HighPublic exploit

CVE-2003-0561 is a high vulnerability (CVSS 7.5) in Iglooftp Pro, published July 15, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 89th percentile. No source names a fixed version.

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.

Exploit likelihood

3.79%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.

Record
CVE-2003-0561
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.

Record
CVE-2003-0561
Updated
2026-11-02
EUVDEUVD-2003-0555 No score

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.

Record
EUVD-2003-0555
Updated
2026-11-03
GitHub AdvisoriesGHSA-mgfg-p373-5w2p No score

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code...

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.

Record
GHSA-mgfg-p373-5w2p
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD

References

MoveEnter Open