VULNERABILITY INTELLIGENCE

CVE-2011-10029

CVSS score8.7 HIGH

EPSS probability1.04%

CISA KEVNot currently listed

Published2025-08-20

Last modified2026-06-16

Description

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condi... .