Lucene search

VulDBCVE-2024-1017

HistoryJan 29, 2024 - 7:15 p.m.

CVE-2024-1017

2024-01-2919:15:08

CWE-404

VulDB

web.nvd.nist.gov

cve-2024-1017

gabriels ftp server

denial of service

vdb-252287

security patch

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

73.2%

JSON

A vulnerability was found in Gabriels FTP Server 1.2. It has been rated as problematic. This issue affects some unknown processing. The manipulation of the argument USERNAME leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-252287.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

gabriels_ftp_server_projectgabriels_ftp_serverMatch1.2

VendorProductVersionCPE
gabriels_ftp_server_projectgabriels_ftp_server1.2cpe:2.3:a:gabriels_ftp_server_project:gabriels_ftp_server:1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gabriels_ftp_server_project	gabriels_ftp_server	1.2	cpe:2.3:a:gabriels_ftp_server_project:gabriels_ftp_server:1.2:::::::*

CNA Affected

[
  {
    "vendor": "Gabriels",
    "product": "FTP Server",
    "versions": [
      {
        "version": "1.2",
        "status": "affected"
      }
    ]
  }
]

References

packetstormsecurity.com/files/176714/Gabriels-FTP-Server-1.2-Denial-Of-Service.html

vuldb.com/?ctiid.252287

vuldb.com/?id.252287

www.youtube.com/watch?v=wwHuXfYS8yQ

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

73.2%

JSON

Related for CVE-2024-1017