Lucene search
+L

54 matches found

CVE
CVE
•added 2023/01/21 12:00 a.m.•66 views

CVE-2023-24042

CVE-2023-24042 concerns a race condition in LightFTP up to version 2.2 that allows path traversal via a malformed FTP request. The issue stems from a handler thread potentially using an overwritten context->FileName, enabling access to unintended paths. Affected software: LightFTP (versions 1....

7.5CVSS7.4AI score0.00524EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/01/21 12:00 a.m.•44 views

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

7.6AI score0.00524EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/01/21 12:00 a.m.•17 views

LightFTP 竞争条件问题漏洞

LightFTP is a lightweight FTP service. A security vulnerability exists in LightFTP version 2.2 and earlier versions, which stems from two threads relying on the order or timing of the appearance of events when outputting results. An attacker could exploit the vulnerability to achieve path travers...

7.5CVSS7.3AI score0.00524EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/21 12:00 a.m.•3 views

CVE-2023-24042: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

7.5CVSS5.7AI score0.00524EPSS
SaveExploits1References3
OSV
OSV
•added 2023/01/21 12:00 a.m.•32 views

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

7.5CVSS6.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/21 12:00 a.m.•13 views

PT-2023-19375

Name of the Vulnerable Software and Affected Versions LightFTP versions 1.0 through 2.2 LightFTP version 2.2 Description A race condition in the software allows an attacker to achieve path traversal via a malformed FTP request. This occurs because a handler thread can use an overwritten...

7.5CVSS7.2AI score0.00524EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2023/01/21 12:00 a.m.•8 views

CVE-2023-24042

A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...

7AI score0.00524EPSS
SaveExploits1References1
CNVD
CNVD
•added 2017/11/22 12:00 a.m.•28 views

LightFTP Buffer Overflow Vulnerability

LightFTP is a set of FTP server software written in C language. A buffer overflow vulnerability exists in the 'writelogentry' function in LightFTP version 1.1. A remote attacker could exploit this vulnerability to cause a denial of service or code execution...

9.8CVSS7.8AI score0.03379EPSS
SaveExploits1References1
Prion
Prion
•added 2017/11/17 12:29 a.m.•17 views

Buffer overflow

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

7.5CVSS9.7AI score0.03379EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2017/11/17 12:29 a.m.•24 views

CVE-2017-1000218

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

9.8CVSS9.9AI score0.03379EPSS
SaveExploits1References1
OSV
OSV
•added 2017/11/17 12:29 a.m.•18 views

CVE-2017-1000218

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

9.8CVSS8.5AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/17 12:00 a.m.•4 views

CVE-2017-1000218: Improper Restriction of Operations within the Bounds of a Memory Buffer

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

9.8CVSS8.8AI score0.03379EPSS
SaveExploits1References2
CVE
CVE
•added 2017/11/17 12:00 a.m.•73 views

CVE-2017-1000218

CVE-2017-1000218 concerns LightFTP 1.1, where a buffer overflow in the writelogentry function can lead to denial of service or remote code execution. The vulnerability description across the sources consistently identifies the affected component and the potential impacts. The CVE language does no...

9.8CVSS9.8AI score0.03379EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2017/11/17 12:00 a.m.•32 views

CVE-2017-1000218

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

9.9AI score0.03379EPSS
SaveExploits1References1
Rows per page
Query Builder