CVE-2025-65403

LightFTP v2.0 contains a buffer overflow in the g_cfg.MaxUsers component that enables Denial-of-Service from crafted input. Public entries across multiple feeds confirm the affected version (LightFTP 2.0) and the DoS impact; no remediation or fixed version is identified in the provided documents....

CVE-2025-65403

A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2017-1490

Malware in sbrugna...

EUVD-2023-28106

Malicious code in bioql PyPI...

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

CVE-2017-1000218

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

CVE-2024-11144 Race Condition with LightFTP

The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it...

CVE-2024-11144

CVE-2024-11144 affects LightFTP server (notably version 2.3 per CNNVD/NVD entries) with a lack of thread safety that allows an anonymous remote attacker to crash the FTP service by sending anomalous data. Consequences include FTP service unavailability, potential incomplete file transfers and dat...

CVE-2024-11144 Race Condition with LightFTP

The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it...

LightFTP 安全漏洞

LightFTP is a lightweight FTP service by hfiref0x individual developers. A security vulnerability exists in LightFTP version 2.3, which stems from a lack of thread security on the server and can be caused to crash by anomalous data sent by an anonymous user from a remote network...

LightFTP 1.1 Denial Of Service

!/usr/bin/perl use Net::FTP; Exploit Title: LightFTP 1.1 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 15 january 2024 Vendor Homepage: N/A Notification vendor: No reported Tested Version: LightFTP 1.1 Tested on: Window XP Professional - Service Pack 2 and 3 - English...

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

Race condition

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

CVE-2023-24042

CVE-2023-24042 concerns a race condition in LightFTP up to version 2.2 that allows path traversal via a malformed FTP request. The issue stems from a handler thread potentially using an overwritten context->FileName, enabling access to unintended paths. Affected software: LightFTP (versions 1....

LightFTP 竞争条件问题漏洞

LightFTP is a lightweight FTP service. A security vulnerability exists in LightFTP version 2.2 and earlier versions, which stems from two threads relying on the order or timing of the appearance of events when outputting results. An attacker could exploit the vulnerability to achieve path travers...

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

PT-2023-19375 · Lightftp · Lightftp

Name of the Vulnerable Software and Affected Versions: LightFTP versions 1.0 through 2.2 LightFTP version 2.2 Description: A race condition in the software allows an attacker to achieve path traversal via a malformed FTP request. This occurs because a handler thread can use an overwritten...

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

LightFTP Buffer Overflow Vulnerability

LightFTP is a set of FTP server software written in C language. A buffer overflow vulnerability exists in the 'writelogentry' function in LightFTP version 1.1. A remote attacker could exploit this vulnerability to cause a denial of service or code execution...