CVE-2024-0737 - Xlightftpd Xlight FTP Server Login denial of service

Back Back to CVE browser

HIGH

Xlightftpd Xlight FTP Server Login denial of service

Published Jan 19, 2024

7.5

HIGH

CVSS 3.1

EPSS 4.20%

Description

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.

Affected products

Vendor Xlightftpd Product Xlight FTP Server Default
n/a
- Version
  1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Xlightftpd

Xlight FTP Server

n/a

Version	Status	Constraints
1.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16526
Advisory
https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html
exploitThird Party AdvisoryVDB Entry
https://vuldb.com/?ctiid.251560
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.251560
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16526		Advisory
https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html		exploitThird Party AdvisoryVDB Entry
https://vuldb.com/?ctiid.251560		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.251560		vdb-entrytechnical-descriptionThird Party Advisory