CVE-2024-1016 - Solar FTP Server PASV Command denial of service

Back Back to CVE browser

HIGH

Solar FTP Server PASV Command denial of service

Published Jan 29, 2024

7.5

HIGH

CVSS 3.1

EPSS 1.35%

Description

A vulnerability was found in Solar FTP Server 2.1.1/2.1.2. It has been declared as problematic. This vulnerability affects unknown code of the component PASV Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-252286 is the identifier assigned to this vulnerability.

Affected products

Vendor Solar Product FTP Server Default
n/a
- Version
  2.1.1
  Status
  affected
  Constraints
  -
- Version
  2.1.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Solar

FTP Server

n/a

Version	Status	Constraints
2.1.1	affected	-
2.1.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (3)

https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html
exploitThird Party AdvisoryVDB Entry
https://vuldb.com/?ctiid.252286
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.252286
vdb-entryThird Party Advisory

Link	Providers	Tags
https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html		exploitThird Party AdvisoryVDB Entry
https://vuldb.com/?ctiid.252286		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.252286		vdb-entryThird Party Advisory