CVE-2010-2620

Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR, or other commands without performing the required login steps first.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

29.55% chance of exploitation in the next 30 days, 98th percentile

Published

2010-07-02

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/13932

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/open_ftpd_wbem.rb

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/27556
• https://www.exploit-db.com/exploits/27401
• https://www.exploit-db.com/exploits/13932

Security advisories

• http://secunia.com/advisories/40284

References

• CVE Record
• NVD entry