CVE-2004-2037: Mollensoft Software Lightweight FTP Server

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client.

Affected products

• Mollensoft Software Lightweight FTP Server: version 3.6 only

Published 2004-03-24. Last modified 2026-06-16.