Karjasoft's vulnerability footprint centers on a narrow portfolio of file-transfer and HTTP server products that, despite modest prevalence, have historically attracted public exploit tooling. The recurring exposure involves input-validation weaknesses, memory-buffer handling flaws, and resource-management issues typical of legacy network-service software. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Karjasoft over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-0441HIGH Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed. | Jan 26, 2006 | 7.5 | 75 | NO | YES |
CVE-2006-2212MEDIUM Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) PASS command. | May 5, 2006 | 6.4 | 66 | NO | YES |
CVE-2008-5106HIGH Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an | Nov 17, 2008 | 10.0 | 41 | NO | YES |
CVE-2004-0292HIGH Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. | Nov 23, 2004 | 10.0 | 38 | NO | YES |
CVE-2004-2082MEDIUM The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a GET request wit a large number of leading | Feb 13, 2004 | 5.0 | 25 | NO | YES |
CVE-2021-4433HIGH A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unknown function of the component HTTP HEAD Rrequest Handler. The | Jan 18, 2024 | 7.5 | 24 | NO | NO |
CVE-2004-2081MEDIUM The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot | Dec 31, 2004 | 5.0 | 24 | NO | YES |
CVE-2008-5105MEDIUM KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) | Nov 17, 2008 | 5.0 | 23 | NO | YES |
CVE-2007-0548MEDIUM KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects. | Jan 29, 2007 | 5.0 | 23 | NO | YES |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Karjasoft.
Media articles that mention a CVE ID that affects a product developed by Karjasoft — matched by CVE ID, not by vendor name.