Lucene search
HistoryDec 19, 2008 - 1:52 a.m.
CVE-2008-5666
winftp ftp server
2.3.0
passive mode
pasv
denial of service
cve-2008-5666
nvd
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
High
0.147 Low
EPSS
Percentile
95.8%
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid “NLST -1” command.
Affected configurations
Node
wftpserverwinftp_ftp_serverMatch2.3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| wftpserver:winftp_ftp_server | wftpserver winftp ftp server | eq | 2.3.0 |
Related
cvelist
cvelist
CVE-2008-5666
2008-12-18 21:00:00
openvas
openvas
WinFTP Server <= 2.3.0 PASV Command DoS Vulnerability
2008-12-26 00:00:00
WinFTP Server PASV Command Denial of Service Vulnerability
2008-12-26 00:00:00
nvd
nvd
CVE-2008-5666
2008-12-19 01:52:02
prion
prion
Command injection
2008-12-19 01:52:00
checkpoint_advisories
checkpoint_advisories
WinFTP Server NLST Command Denial of Service (CVE-2008-5666)
2014-12-01 00:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
High
0.147 Low
EPSS
Percentile
95.8%
Related for CVE-2008-5666