EUVD-2025-17005Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | This vulnerability presents elevated real-world risk despite a moderate CVSS score of 7.3. Risk signals analysis: (1) CVSS 7.3 with AV:N/AC:L/PR:N/UI:N indicates network-accessible, unauthenticated, no-user-interaction-required exploitation; (2) Public exploit disclosure significantly increases exploitation probability; (3) CWE-119 buffer overflows are reliably exploitable on legacy systems; (4) FTP protocol operates on well-known ports (21), making reconnaissance trivial; (5) The vulnerability affects legacy FTP server software (version 1.0) likely deployed in legacy environments with minimal monitoring. The 'unknown functionality' notation suggests incomplete vendor documentation, increasing diagnostic difficulty. Real-world risk is HIGH despite the moderate CVSS score due to accessibility, ease of exploitation, public POC availability, and likelihood of affected systems in production legacy environments. |
| Exploit ScenarioDerived | An attacker performs reconnaissance on the target network, identifying FTP service listening on port 21. The attacker sends a crafted REIN command with an oversized argument payload designed to overflow the buffer in the command handler. Because the vulnerability requires no authentication (PR:N) and no user interaction, the attack succeeds immediately upon connection. Depending on memory layout and server configuration, the buffer overflow either: (a) corrupts adjacent memory, crashing the FTP service (DoS), (b) leaks sensitive data from memory (information disclosure), or (c) overwrites the instruction pointer to execute injected shellcode for remote code execution. Given public POC availability, this attack is trivial to automate and can be deployed at scale against all internet-facing FTP servers running FreeFloat 1.0. Attack complexity is LOW (AC:L) per CVSS, indicating no special conditions or timing requirements. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 14, 2026
Critical buffer overflow vulnerability in FreeFloat FTP Server 1.0's REIN Command Handler that allows unauthenticated remote attackers to cause information disclosure, integrity compromise, and denial of service. The vulnerability has been publicly disclosed with exploit code available, making it a high-priority threat for any organization running vulnerable FTP server instances.
RemediationAI
Immediate remediation steps: (1) Disable FTP Server 1.0 if not operationally critical, replacing with modern, actively-maintained alternatives (e.g., vsftpd, ProFTPD, or cloud-based file transfer solutions); (2) If retention is mandatory: implement network segmentation restricting FTP access to trusted IP ranges only via firewall rules; (3) Monitor FTP server logs for REIN command anomalies and connection attempts from unexpected sources; (4) Deploy intrusion detection/prevention systems (IDS/IPS) with signatures for buffer overflow attempts against FTP REIN commands; (5) Contact FreeFloat vendor for patch availability - if no patch exists for version 1.0, plan immediate migration to patched or alternative FTP server software; (6) Implement rate limiting on FTP command processing to mitigate automated exploitation attempts.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
FreeFloat FTP Server 1.0 contains a buffer overflow vulnerability (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer) in the REIN (Reset) command handler component. The REIN command is a standard FTP protocol command used to restart file transfer sessions. The vulnerability stems from insufficient input validation or bounds checking when processing REIN command arguments, allowing an attacker to write data beyond allocated buffer boundaries. This is a classic memory corruption vulnerability that can lead to arbitrary code execution or information leakage. The affected product is identified through CPE strings related to FreeFloat FTP Server version 1.0.
Know when Freefloat Ftp Server gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component REIN Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
FreeFloat FTP Server 1.0 contains a critical buffer overflow vulnerability in its REIN command handler that can be exploited remotely to achieve code execution. With public exploits now available and no patch from the vendor, any organization running this FTP server is at immediate risk of unauthorized access, data theft, and system compromise.
Disable the REIN command through server configuration if available; restrict FTP access to specific IP ranges via firewall rules; implement network segmentation to limit FTP server connectivity; deploy IDS/IPS signatures to detect REIN command exploitation attempts; consider WAF or reverse proxy to monitor/block suspicious FTP traffic; require authentication via VPN before FTP access; monitor logs for unusual REIN command activity; consider disabling FTP protocol entirely in favor of SFTP or other secure alternatives.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
More in Freefloat Ftp Server
View allA stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. Rated medium severity (CVSS 6.
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via
Critical buffer overflow vulnerability in the NOOP Command Handler of FreeFloat FTP Server 1.0 that allows remote, unaut
A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Rated high severity (CVSS 7.5), thi
Critical buffer overflow vulnerability in the XMKD Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticat
Critical buffer overflow vulnerability in the XCWD Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticat
Critical buffer overflow vulnerability in the RESTART Command Handler of FreeFloat FTP Server 1.0 that allows unauthenti
Critical buffer overflow vulnerability in FreeFloat FTP Server 1.0 affecting the REGET command handler, allowing unauthe
Critical buffer overflow vulnerability in the PROGRESS Command Handler of FreeFloat FTP Server 1.0 that allows unauthent
Critical buffer overflow vulnerability in the SET Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticate
Critical buffer overflow vulnerability in the HOST Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticat
GitHub PoC
Exploit-DB