What’s Vulnerable › Vulnerabilities

CVE-2011-3991

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-11-04 · updated 2026-06-16

Description

Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions.

Affected products

• Ffftp: through 1.98; 1.98

References

• http://jvn.jp/en/jp/JVN62336482/index.html
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000091.html
• http://secunia.com/advisories/46649
• http://sourceforge.jp/projects/ffftp/wiki/Security
• http://www.securityfocus.com/bid/50412
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71020
• http://jvn.jp/en/jp/JVN62336482/index.html
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000091.html
• http://secunia.com/advisories/46649
• http://sourceforge.jp/projects/ffftp/wiki/Security
• http://www.securityfocus.com/bid/50412
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71020

Get alerted when CVE-2011-3991 or the next vulnerability affects your stack