CVE-2011-10029 — Solar FTP Server <= 2.1.1 Malformed USER Denial of Service
Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due…
Published: 2025-08-20 · CVSS: 8.7 · CVSS 4.0
Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7