CVE-2003-0755: Gtkftpd Gtkftp

High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days.

Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command.

Affected products

• Gtkftpd Gtkftp: version 1.0.2 only; version 1.0.3 only; version 1.0.4 only

Published 2003-10-20. Last modified 2026-06-16.