CVE-2020-37029CWE-120

FTPDummy 4.80 - Local Buffer Overflow

High · published January 30, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

⚡ A local buffer overflow vulnerability in FTPDummy 4.80 is a ticking time bomb for code execution! 🚀 Think of it like a restaurant that lets customers customize their meal orders to the point where someone can slip in a secret ingredient that shouldn’t be there — once the chef accepts it, chaos ensues in the kitchen! 🍽️ An attacker could craft a malicious preference file that triggers a structured exception handler overwrite, allowing them to execute system commands at will. This could lead to complete system compromise, giving the bad actor a backstage pass to your server. Absolutely devastating! 🔥

Put simply

Think of it like a restaurant that lets customers customize their meal orders to the point where someone can slip in a secret ingredient that shouldn’t be there — once the chef accepts it, chaos ensues in the kitchen! 🍽️ This vulnerability in FTPDummy 4.80 allows attackers to exploit local buffer overflow in its preference file handling, which can lead to arbitrary code execution via carefully constructed shellcode.

What to do

An attacker could craft a malicious preference file that triggers a structured exception handler overwrite, allowing them to execute system commands at will. This could lead to complete system compromise, giving the bad actor a backstage pass to your server. Absolutely devastating! 🔥 Immediate action is required: upgrade FTPDummy to version 4.81 or later to patch this vulnerability. Also, review and sanitize any preference files to ensure they don’t contain unexpected or malicious content. 🛡️ You've got this! Stay proactive and secure your systems with these steps. 🌟

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-30T22:07Z
EPSS history
Timeline
  • 30 JAN 22:07Z
    FTPDummy 4.80 - Local Buffer Overflow
    cvelistv5