CVE-2012-10035Exploit

LOWCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

Exploit tooling references are present in monitored signal
1 mentions across 1 observed day

What's happening

Exploit tool or code specified in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Exploit

1100.0%

Referenced assets1 URL

By indicator

https://zerodaysignal.com/vulnerability/CVE-2012-10035

Full discourse1 post

0day Signal@0dayPublishing184d
Exploit
🚨 CVE-2012-10035: Turbo FTP Server 1.30.823/826 PO... Ancient FTP server with unauthenticated RCE via PORT overflow - SYSTEM shells handed out like candy with Metasploit mod... https://zerodaysignal.com/vulnerability/CVE-2012-10035 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces an unauthenticated RCE in Turbo FTP Server, notes a Metasploit module for exploitation, but provides no patch info or evidence of active attacks.
0000032
204 followersView on X

Explore more

Back to dashboard