Lucene search

VulDBCVELIST:CVE-2024-0737

HistoryJan 19, 2024 - 9:31 p.m.

CVE-2024-0737 Xlightftpd Xlight FTP Server Login denial of service

2024-01-1921:31:03

CWE-404

VulDB

www.cve.org

vulnerability

xlight ftp server

denial of service

remote attack

user manipulation

exploit disclosure

vdb-251560

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

34.8%

JSON

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.

CNA Affected

[
  {
    "vendor": "Xlightftpd",
    "product": "Xlight FTP Server",
    "versions": [
      {
        "version": "1.1",
        "status": "affected"
      }
    ],
    "modules": [
      "Login"
    ]
  }
]

References

packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html

vuldb.com/?ctiid.251560

vuldb.com/?id.251560

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

34.8%

JSON

Related for CVELIST:CVE-2024-0737