CVE-2009-3484: Coreftp Core FTP

High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file. NOTE: some of these details are obtained from third party information.

Affected products

• Coreftp Core FTP: version 2.1 only

Published 2009-09-30. Last modified 2026-06-16.