Electrasoft develops a narrowly focused FTP client product line, including 32bit FTP and related utilities for file-transfer operations. The durable signal from its disclosures centers on memory-buffer handling, where improper bounds restriction has recurred as the primary weakness class. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Electrasoft over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-1675HIGH Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command. | May 18, 2009 | 9.3 | 48 | NO | YES |
CVE-2009-1592HIGH Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner. NOTE: this might overlap CVE-2003-1368. | May 8, 2009 | 10.0 | 39 | NO | YES |
CVE-2009-1611HIGH Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command. | May 11, 2009 | 10.0 | 38 | NO | YES |
CVE-2003-1368MEDIUM Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner. | Dec 31, 2003 | 6.4 | 27 | NO | YES |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Electrasoft.
Media articles that mention a CVE ID that affects a product developed by Electrasoft — matched by CVE ID, not by vendor name.