{"id":"CVE-2001-1021","aliases":["EUVD-2001-1002","GHSA-q779-8rmm-x7qv"],"status":"published","title":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long...","description":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.42141,"percentile":0.98702,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2001-07-26T04:00:00Z","modified":"2026-06-16T21:55:25Z","exploits":[{"source":"exploitdb","id":"EDB-1158","title":"Ipswitch WS_FTP Server 5.03 - 'RNFR' Buffer Overflow","type":"dos","platform":"windows","date":"2004-11-29","verified":true,"url":"https://www.exploit-db.com/exploits/1158"},{"source":"exploitdb","id":"EDB-21036","title":"Ipswitch WS_FTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows","type":"remote","platform":"windows","date":"2001-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/21036"}],"products":[{"vendor":"progress","product":"ws_ftp_server"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6911","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1021"},{"url":"https://github.com/advisories/GHSA-q779-8rmm-x7qv"}],"sources":{"cve":[{"id":"CVE-2001-1021","description":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.","status":"published","published":"2002-02-02T05:00:00Z","modified":"2024-08-08T04:44:06.506Z","updated_at":"2026-11-02T14:34:42.680977Z"}],"euvd":[{"id":"EUVD-2001-1002","description":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.","status":"published","published":"2002-02-02T05:00:00Z","modified":"2024-08-08T04:44:06Z","updated_at":"2026-11-03T01:14:49.089023Z"}],"ghsa":[{"id":"GHSA-q779-8rmm-x7qv","title":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long...","description":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.","status":"published","published":"2022-04-30T18:17:11Z","modified":"2023-01-30T05:05:45Z","updated_at":"2026-11-02T14:47:20.673245Z"}],"nvd":[{"id":"CVE-2001-1021","description":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.","status":"published","published":"2001-07-26T04:00:00Z","modified":"2026-06-16T21:55:25.667Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:40.041412Z"}]}}