https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-0507.htmlhttps://patchthecve.com/cve/CVE-2011-0507.htmlTue, 16 Jun 2026 23:27:31 +0000MEDIUM 4.3: FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of thttps://patchthecve.com/cve/CVE-2003-0343.htmlhttps://patchthecve.com/cve/CVE-2003-0343.htmlTue, 16 Jun 2026 22:02:01 +0000MEDIUM 4.6: BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks.https://patchthecve.com/cve/CVE-2003-0342.htmlhttps://patchthecve.com/cve/CVE-2003-0342.htmlTue, 16 Jun 2026 22:02:01 +0000MEDIUM 4.6: BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.https://patchthecve.com/cve/CVE-2002-0126.htmlhttps://patchthecve.com/cve/CVE-2002-0126.htmlTue, 16 Jun 2026 21:56:50 +0000HIGH 7.5: Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.