Lucene search

K
nvd[email protected]NVD:CVE-2008-6534
HistoryMar 26, 2009 - 9:00 p.m.

CVE-2008-6534

2009-03-2621:00:00
CWE-20
web.nvd.nist.gov

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.3%

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as “&” (ampersand) in the middle of an argument.

Affected configurations

NVD
Node
vwsolutionsnull_ftpMatch1.1.0.7pro
OR
vwsolutionsnull_ftpMatch1.1.0.7svr

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.3%

Related for NVD:CVE-2008-6534