CVE-2003-1300: Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to...

Security readout for executives and security teams

This CVE describes a remote denial-of-service issue in Baby FTP Server 1.2, and possibly earlier builds before May 31, 2003. An attacker could open many connections from one IP address and crash the service through an access violation. The known business impact is FTP service outage, not data theft or code execution. Exposure is likely limited to legacy systems still running Baby FTP Server/BabyFTP, especially internet-facing FTP services. The structured affected-product fields are incomplete, so inventory should rely on service discovery, host software records, and any available version evidence. Prioritize this when BabyFTP is exposed to untrusted networks or supports business-critical file transfer. Otherwise, handle as legacy hygiene: find it, restrict it, and replace it with a supported service. Mitigation focus: Remove or retire Baby FTP Server where it is no longer required.; Restrict FTP access to trusted networks or VPN-only access.; Apply connection limits or rate controls at network controls where possible..

Prepared

Jun 29, 2026, 13:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.