Skip to content

CVE-2009-1675

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to...

9.3 HighPublic exploit

CVE-2009-1675 is a high vulnerability (CVSS 9.3) in Electrasoft 32bit Ftp, published May 18, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.8%, the 96th percentile. No source names a fixed version.

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.

Exploit likelihood

13.8%Up 11.6 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.

Record: CVE-2009-1675
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.

Record: CVE-2009-1675
Updated: 2026-11-02

EUVDEUVD-2009-1670 No score

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.

Record: EUVD-2009-1670
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8hj6-4wv2-39hh No score

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to...

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.

Record: GHSA-8hj6-4wv2-39hh
Weakness: CWE-119
Updated: 2026-11-02

Affected products

electrasoft 32bit ftp

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)	2009-05-07
Metasploit	32bit FTP Client Stack Buffer Overflow	2010-10-12

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

References