Lucene search

[email protected]CVE-2006-6751

HistoryDec 27, 2006 - 12:28 a.m.

CVE-2006-6751

2006-12-2700:28:00

CWE-134

[email protected]

web.nvd.nist.gov

cve-2006-6751

xm easy personal ftp server

format string vulnerability

denial of service

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.181 Low

EPSS

Percentile

96.2%

JSON

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable.

Affected configurations

NVD

Node

dxmsoftxm_easy_personal_ftp_serverMatch5.2.1

dxmsoftxm_easy_personal_ftp_serverMatch5.3

CPENameOperatorVersion
dxmsoft:xm_easy_personal_ftp_serverdxmsoft xm easy personal ftp servereq5.2.1
dxmsoft:xm_easy_personal_ftp_serverdxmsoft xm easy personal ftp servereq5.3

CPE	Name	Operator	Version
dxmsoft:xm_easy_personal_ftp_server	dxmsoft xm easy personal ftp server	eq	5.2.1
dxmsoft:xm_easy_personal_ftp_server	dxmsoft xm easy personal ftp server	eq	5.3

References

downloads.securityfocus.com/vulnerabilities/exploits/18632.txt

downloads.securityfocus.com/vulnerabilities/exploits/22747.pl

www.securityfocus.com/bid/18632

www.securityfocus.com/bid/22747

www.vupen.com/english/advisories/2007/0786

exchange.xforce.ibmcloud.com/vulnerabilities/31140

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.181 Low

EPSS

Percentile

96.2%

JSON

Related for CVE-2006-6751

nvd1 cvelist1