Miniftpd Project Miniftpd — known CVE vulnerabilities

Every CVE whose affected-product data names Miniftpd Project Miniftpd, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-40239 — CVSS 9.8 (critical): A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c
• CVE-2021-42624 — CVSS 7.8 (high): A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp variable, where a crafted…
• CVE-2021-39602 — CVSS 6.5 (medium): A Buffer Overflow vulnerabilty exists in Miniftpd 1.0 in the do_mkd function in the ftpproto.c file, which could let a remote malicious…