High severityNVD Advisory· Published Aug 20, 2025· Updated Apr 15, 2026
CVE-2011-10029
CVE-2011-10029
Description
Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <= 2.1.2
Patches
Vulnerability mechanics
References
5- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/ftp/solarftp_user.rbnvd
- web.archive.org/web/20111009122553/http://solarftp.com/blog/news/solar-ftp-server-2-1-2.htmlnvd
- web.archive.org/web/20111102141514/https://solarftp.com/nvd
- www.exploit-db.com/exploits/16204nvd
- www.vulncheck.com/advisories/solar-ftp-server-malformed-user-dosnvd
News mentions
0No linked articles in our index yet.