Globalscape Cuteftp — known CVE vulnerabilities

Every CVE whose affected-product data names Globalscape Cuteftp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2008-2779 — CVSS 9.3 (critical): Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 allows…
• CVE-2009-3483 — CVSS 9.3 (critical): Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows…
• CVE-2003-1260 — CVSS 7.6 (high): Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.
• CVE-2004-1136 — CVSS 5.0 (medium): Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service…
• CVE-2000-0084 — CVSS 5.0 (medium): CuteFTP uses weak encryption to store password information in its tree.dat file.
• CVE-2024-1190 — CVSS 3.3 (low): A vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic. Affected by this issue is some unknown…
• CVE-2003-1261 — CVSS 2.1 (low): Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash) by copying a long URL into a clipboard.