CVE-2016-20046
zFTP Client 20061220+dfsg3-4.1 Local Buffer Overflow
- State
- Published
- Severity
- 8.6 High
- Published
- Mar 28, 2026
- Updated
- Apr 1, 2026
- Reserved
- Mar 28, 2026
Description
zFTP Client 20061220+dfsg3-4.1 contains a buffer overflow vulnerability in the NAME parameter handling of FTP connections that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized NAME value exceeding the 80-byte buffer allocated in strcpy_chk to overwrite the instruction pointer and execute shellcode with user privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
zFTP ClientzFTP |
|
References
- ExploitDB-40203exploit
- Official Product Homepageproduct
- VulnCheck Advisory: zFTP Client 20061220+dfsg3-4.1 Local Buffer Overflowthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.