What is CVE-2008-5666?

CVE-2008-5666 is a vulnerability in N/a. Published 2008-12-18.

Is CVE-2008-5666 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2008-5666

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command.

EPSS: 0.633 (98.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

ADV-2008-2801 (vdb-entry, x_refsource_VUPEN)
4785 (x_refsource_SREASON, third-party-advisory)
32209 (x_refsource_SECUNIA, third-party-advisory)
1021040 (vdb-entry, x_refsource_SECTRACK)
winftpserver-nlst-dos(45806) (vdb-entry, x_refsource_XF)
6717 (exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2008-5666?: CVE-2008-5666 is a vulnerability in N/a. Published 2008-12-18.
Is CVE-2008-5666 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.