Critical severity9.8NVD Advisory· Published Mar 1, 2018· Updated Jun 17, 2026

CVE-2018-7573

Description

An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ftpshell/Client2 versions
cpe:2.3:a:ftpshell:ftpshell_client:6.70:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ftpshell:ftpshell_client:6.70:*:*:*:*:*:*:*
- (no CPE)range: =6.7

Patches

Vulnerability mechanics

References

cxsecurity.com/issue/WLB-2018030011nvdExploitThird Party Advisory
www.exploit-db.com/exploits/44596/nvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/44968/nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.055
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000