CVE-2009-1592

CVE-2009-1592 is a critical stack-based buffer overflow vulnerability affecting ElectraSoft 32bit FTP version 09.04.24, which occurs when the client processes an excessively long banner sent by a malicious remote FTP server. Assigned a maximum CVSS score of 10.0, this flaw permits unauthenticated attackers to execute arbitrary code and achieve complete system compromise through a low-complexity network vector. While there is no current evidence of active exploitation in the wild or inclusion in the CISA Known Exploited Vulnerabilities catalog, functional proof-of-concept exploit code is publicly available on ExploitDB, necessitating immediate remediation despite the lack of recent media attention.