CVE-2011-10029: Flexbyte Software Solar FTP Server

High severity, CVSS 8.7. EPSS: 1% chance of exploitation in the next 30 days.

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.

Affected products

• Flexbyte Software Solar FTP Server: up to and including 2.1.1

Published 2025-08-20. Last modified 2026-06-16.