CVE-2008-4321
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute...
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
- Record
CVE-2008-4321- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
- Record
CVE-2008-4321- Updated
- 2026-11-02
EUVDEUVD-2008-4302 No score
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
- Record
EUVD-2008-4302- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m48r-594h-72m8 No score
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute...
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
- Record
GHSA-m48r-594h-72m8- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | FlashGet 1.9 - 'FTP PWD Response' Remote Buffer Overflow (PoC) | 2008-08-13 |
| Exploit-DB | FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow | 2008-08-15 |
| Exploit-DB | FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH) | 2008-08-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4321 is a high vulnerability (CVSS 9.3) in Flashget Ftp, published September 29, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.78%, the 93rd percentile. No source names a fixed version.