CVE-2012-10035 CRITICAL

CVE-2012-10035: Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow

Vendor Turbosoft, Inc.
Product TurboFTP Server
Weakness CWE-120
Published August 5, 2025
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges.

Key dates

02Disclosure timeline

August 5, 2025 CVE published
April 7, 2026 Record updated