Leapware Leapftp — known CVE vulnerabilities

Every CVE whose affected-product data names Leapware Leapftp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2003-0558 — CVSS 7.5 (high): Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.
• CVE-2005-2767 — CVSS 7.5 (high): Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.lsq) file.