CVE-2010-20115

CVE-2010-20115 is a critical memory corruption vulnerability affecting Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to 1.31. This flaw, stemming from an out-of-bounds array access during FTP PORT command parsing, allows an attacker to manipulate stack memory and potentially execute arbitrary code. With a CVSS score of 9.3 (CRITICAL), exploitation requires direct network access to the FTP service and is considered low complexity. While not actively exploited in the wild, a Metasploit module exists, and the vulnerability has garnered significant community discussion, indicating a high potential for exploitation.