Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0255
xlight
denial of service
cve-2004-0255
security vulnerability
7 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.046 Low
EPSS
Percentile
92.5%
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.
Affected configurations
Node
xlight_ftp_serverxlight_ftp_serverMatch1.25
ORxlight_ftp_serverxlight_ftp_serverMatch1.41
ORxlight_ftp_serverxlight_ftp_serverMatch1.45
ORxlight_ftp_serverxlight_ftp_serverMatch1.52
Related
cvelist
cvelist
CVE-2004-0255
2004-03-18 05:00:00
nvd
nvd
CVE-2004-0255
2004-11-23 05:00:00
nessus
nessus
Xlight FTP Server Multiple Remote Overflows
2004-02-16 00:00:00
7 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.046 Low
EPSS
Percentile
92.5%
Related for CVE-2004-0255