Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2008-0604
xlight ftp server
ldap authentication
bypass
remote attackers
nvd
cve-2008-0604
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.
Affected configurations
Node
xlight_ftp_serverxlight_ftp_serverRange≤2.82
| CPE | Name | Operator | Version |
|---|---|---|---|
| xlight_ftp_server:xlight_ftp_server | xlight ftp server | le | 2.82 |
Related
cvelist
cvelist
CVE-2008-0604
2022-10-03 16:14:09
nvd
nvd
CVE-2008-0604
2008-02-06 12:00:00
prion
prion
Authentication flaw
2008-02-06 12:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2008-0604