CVE-2003-1319: Smartftp

High severity, CVSS 7.6. EPSS: 5% chance of exploitation in the next 30 days.

Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow.

Affected products

• Smartftp Smartftp: up to and including 1.0.973

Published 2003-12-31. Last modified 2026-06-16.