Vulnerability in Xlight FTP Server
CVE-2004-0255
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.
EPSS: 0.074 (93.8th percentile) — read the EPSS interpretation.
Affected products
- Xlight_ftp_server — versions 1.25, 1.41, 1.45
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)