CVE-2010-20115

Description

Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attacker to manipulate stack memory and potentially execute arbitrary code. Exploitation requires direct access to the FTP service and is constrained by a single execution attempt if the daemon is installed as a Windows service.

Weakness Type (CWE)

CWE-704 CWE-704

CWE-787 Out-of-bounds Write

References

Other References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/vermillion_ftpd_port.rb https://web.archive.org/web/20100213162028/http://www.softsea.com/review/Vermillion-FTP-Daemon.html https://web.archive.org/web/20100416140657/http://www.global-evolution.info/news/files/vftpd/vftpd.txt https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=23681 https://www.exploit-db.com/exploits/11293 https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.FTP:EXPLOIT:VERMILLION-PORT-OF.html https://www.vulncheck.com/advisories/vermillion-ftp-daemon-port-command-memory-corruption https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/vermillion_ftpd_port.rb https://www.exploit-db.com/exploits/11293

Frequently Asked Questions

What is CVE-2010-20115? +

Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attacker to manipulate stack memory and potentially execute arbitrary code. Exploitation requires direct access to the FTP service and is constrained by a single execution attempt if the daemon is installed as a Windows service.

How do I check if I'm vulnerable to CVE-2010-20115? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-54429

Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. There are various account address types in …

CVE-2025-41646 9.8

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This …

CVE-2024-5436 9.8

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We …

CVE-2025-41648 9.8

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to …

CVE-2025-62494 8.8

A type confusion vulnerability exists in the handling of the string addition (+) operation within the QuickJS engine. * The …

CVE-2025-13720 8.8

Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process …