PatchTheCVE: eftphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2001-1193: Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ..https://patchthecve.com/cve/CVE-2001-1193.htmlhttps://patchthecve.com/cve/CVE-2001-1193.htmlTue, 16 Jun 2026 21:55:47 +0000MEDIUM 5.0: Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command.CVE-2001-1112: Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file chttps://patchthecve.com/cve/CVE-2001-1112.htmlhttps://patchthecve.com/cve/CVE-2001-1112.htmlTue, 16 Jun 2026 21:55:36 +0000HIGH 7.5: Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters.CVE-2001-1111: EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.https://patchthecve.com/cve/CVE-2001-1111.htmlhttps://patchthecve.com/cve/CVE-2001-1111.htmlTue, 16 Jun 2026 21:55:36 +0000MEDIUM 4.6: EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.CVE-2001-1110: EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that https://patchthecve.com/cve/CVE-2001-1110.htmlhttps://patchthecve.com/cve/CVE-2001-1110.htmlTue, 16 Jun 2026 21:55:36 +0000MEDIUM 5.0: EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.CVE-2001-1109: Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory conthttps://patchthecve.com/cve/CVE-2001-1109.htmlhttps://patchthecve.com/cve/CVE-2001-1109.htmlTue, 16 Jun 2026 21:55:36 +0000HIGH 7.5: Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.CVE-2000-0871: Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does nothttps://patchthecve.com/cve/CVE-2000-0871.htmlhttps://patchthecve.com/cve/CVE-2000-0871.htmlTue, 16 Jun 2026 21:52:38 +0000MEDIUM 5.0: Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.CVE-2000-0870: Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.https://patchthecve.com/cve/CVE-2000-0870.htmlhttps://patchthecve.com/cve/CVE-2000-0870.htmlTue, 16 Jun 2026 21:52:38 +0000HIGH 7.5: Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.