CVE-2010-2620: Open-Ftpd

High severity, CVSS 9.3. EPSS: 29.6% chance of exploitation in the next 30 days.

Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR, or other commands without performing the required login steps first.

Affected products

• Open-Ftpd Open-Ftpd: up to and including 1.2; version 1.0 only

Published 2010-07-02. Last modified 2026-06-16.