Lucene search
HistoryMar 26, 2009 - 9:00 p.m.
CVE-2008-6534
cve
2008
6534
null ftp server
vulnerability
remote authenticated
arbitrary commands
nvd
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.3%
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as “&” (ampersand) in the middle of an argument.
Affected configurations
Node
vwsolutionsnull_ftpMatch1.1.0.7pro
ORvwsolutionsnull_ftpMatch1.1.0.7svr
| CPE | Name | Operator | Version |
|---|---|---|---|
| vwsolutions:null_ftp | vwsolutions null ftp | eq | 1.1.0.7 |
References
Related
openvas
openvas
Null FTP Server SITE Command Execution Vulnerability
2009-04-02 00:00:00
Null FTP Server SITE Command Execution Vulnerability
2009-04-02 00:00:00
cvelist
cvelist
CVE-2008-6534
2009-03-26 20:28:00
prion
prion
Input validation
2009-03-26 21:00:00
nvd
nvd
CVE-2008-6534
2009-03-26 21:00:00
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.3%
Related for CVE-2008-6534