Xlight FTP Server Authentication SQL Injection

The version of Xlight FTP installed on the remote host is vulnerable to a SQL injection attack during login. This allows an attacker to execute arbitrary SQL commands in the context of the FTP server. Installations that are not using external ODBC authentication are not affected by this...

Xlight FTP Server Authentication SQL Injection

Binary data 4981.prm...

Xlight FTP Server 3.2 - 'user' SQL Injection

source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Xlight FTP Server 3.2 - user SQL Injection

Xlight FTP Server 3.2 - user SQL Injection source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

Authentication flaw

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

CVE-2008-0604

The CVE concerns XLight FTP Server (before 2.83). The LDAP authentication feature does not validate blank passwords when used with certain LDAP servers, allowing remote bypass of access restrictions. Affected: XLight FTP Server versions prior to 2.83 using LDAP auth. Impact: potential unauthorize...

CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

CVE-2008-0604: Undefined Security Weakness

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

Xlight FTP Server < 1.53 RETR Command Remote Overflow

Binary data 1166.prm...

CVE-2004-0287

Xlight FTP Server 1.52 is vulnerable to a remote denial-of-service via a RETR command with an excessively long argument containing many slash characters, which may trigger a buffer overflow and crash the service. The issue requires authenticated access and affects the server version 1.52 (as cite...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

CVE-2004-0287: Undefined Security Weakness

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

Xlight FTP Server Multiple Remote Overflows

The remot ehost is running a verion of the Xlight FTP server earlier than 1.53. Such versions are reportedly affected by multiple remote buffer overflow vulnerabilities. An attacker could exploit these flaws in order to crash the affected service. C Tenable Network Security, Inc. Ref: From: "intu...

Xlight FTP Server 1.52 - Remote Send File Request Denial of Service

source: https://www.securityfocus.com/bid/9668/info A remote denial of service vulnerability has been reported to exist in the Send File Request functionality of the XLight FTP server. Due to this issue a remote attacker may be able cause the affected server to crash, denying service to legitimat...

Xlight FTP Server 1.52 - Remote Send File Request Denial of Service

Xlight FTP Server 1.52 - Remote Send File Request Denial of Service source: https://www.securityfocus.com/bid/9668/info A remote denial of service vulnerability has been reported to exist in the Send File Request functionality of the XLight FTP server. Due to this issue a remote attacker may be...

Xlight ftp server 1.52 RETR bug

Application: Xlight ftp server http://www.xlightftpd.com/ Version: 1.52 Bug: Denial Of Service Author: intuit e-mail: [email protected] web: http://rootshells.tk/ 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description: "Xlight ft...

Remote crash Xlight ftp server 1.52

Application: Xlight ftp server http://www.xlightftpd.com Version: 1.52 Bug: Denial Of Service Author: intuit e-mail: [email protected] web/forum: http://code.unixserver.at 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description:...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be possible for a remote attacker to deny service to legitimate users of the...