← Vulnerability feed

Vulnerability record · CVE-2005-2426 · published 3 August 2005

CVE-2005-2426: Ftpshell server vulnerability

Ftpshell · Ftpshell Server

FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconnections without using the QUIT command.

2.1 CVSS 2.0 Low EPSS 1.4% · top 29.1%
2.1CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconnections without using the QUIT command.

AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=112239297430460&w=2
http://secunia.com/advisories/16189
http://securitytracker.com/id?1014580
http://www.securityfocus.com/bid/14382
https://exchange.xforce.ibmcloud.com/vulnerabilities/21531
http://marc.info/?l=bugtraq&m=112239297430460&w=2
http://secunia.com/advisories/16189
http://securitytracker.com/id?1014580
http://www.securityfocus.com/bid/14382
https://exchange.xforce.ibmcloud.com/vulnerabilities/21531

Track CVE-2005-2426 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-0349Ftpshell server memory buffer overflow vulnerabilityStack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and p…EPSS 5.9%8.6CVE-2019-25619Ftpshell server out-of-bounds write vulnerabilityFTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary co…EPSS 0.21%7.5CVE-2020-18077Ftpshell server classic buffer overflow vulnerabilityA buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a denial of service (DoS).EPSS 1.2%6.9CVE-2018-25226Ftpshell server out-of-bounds write vulnerabilityFTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long s…EPSS 0.22%

Source: NIST National Vulnerability Database (record CVE-2005-2426), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.