← Vulnerability feed

Vulnerability record · CVE-2003-1260 · published 31 December 2003

CVE-2003-1260: Globalscape cuteftp vulnerability

Globalscape · Cuteftp

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

7.6 CVSS 2.0 High EPSS 8.7% · top 5.0%
7.6CVSS 2.0 base score
8.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2003-01/0123.html
http://archives.neohapsis.com/archives/bugtraq/2003-02/0087.html
http://seclists.org/lists/fulldisclosure/2003/Jan/0126.html
http://secunia.com/advisories/7898
http://www.iss.net/security_center/static/11093.php
http://www.osvdb.org/2181
http://www.securityfocus.com/archive/1/325659 Patch
http://www.securityfocus.com/bid/6642 Exploit
http://archives.neohapsis.com/archives/bugtraq/2003-01/0123.html
http://archives.neohapsis.com/archives/bugtraq/2003-02/0087.html
http://seclists.org/lists/fulldisclosure/2003/Jan/0126.html
http://secunia.com/advisories/7898
http://www.iss.net/security_center/static/11093.php
http://www.osvdb.org/2181
http://www.securityfocus.com/archive/1/325659 Patch
http://www.securityfocus.com/bid/6642 Exploit

Track CVE-2003-1260 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-3483Globalscape cuteftp memory buffer overflow vulnerabilityHeap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows user-assist…EPSS 4.7%9.3CVE-2008-2779Globalscape cuteftp path traversal vulnerabilityDirectory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 allows remote FTP ser…EPSS 2.6%5.5CVE-2024-1190Globalscape cuteftp improper resource shutdown vulnerabilityA vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic. Affected by this issue is some unknown functionality. The ma…EPSS 0.30%5.0CVE-2004-1136Globalscape cuteftp vulnerabilityBuffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) …EPSS 1.1%5.0CVE-2000-0084Globalscape cuteftp vulnerabilityCuteFTP uses weak encryption to store password information in its tree.dat file.EPSS 0.88%2.1CVE-2003-1261Globalscape cuteftp vulnerabilityBuffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash) by copying a long URL into a clipboard.EPSS 0.49%

Source: NIST National Vulnerability Database (record CVE-2003-1260), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.