CVE-2010-10014: Odin Software Odin Secure FTP

High severity, CVSS 8.7. EPSS: 1.5% chance of exploitation in the next 30 days.

Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrites the Structured Exception Handler (SEH). This allows remote attackers to execute arbitrary code on the client system.

Affected products

• Odin Software Odin Secure FTP: up to and including 4.1

Published 2025-08-20. Last modified 2026-06-16.