CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

CVE-2008-0604

The CVE concerns XLight FTP Server (before 2.83). The LDAP authentication feature does not validate blank passwords when used with certain LDAP servers, allowing remote bypass of access restrictions. Affected: XLight FTP Server versions prior to 2.83 using LDAP auth. Impact: potential unauthorize...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

Xlight FTP Server < 1.53 RETR Command Remote Overflow

Binary data 1166.prm...

CVE-2004-0287

Xlight FTP Server 1.52 is vulnerable to a remote denial-of-service via a RETR command with an excessively long argument containing many slash characters, which may trigger a buffer overflow and crash the service. The issue requires authenticated access and affects the server version 1.52 (as cite...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

CVE-2004-0255

CVE-2004-0255 affects Xlight FTP Server (example given: v1.52 with log-to-screen enabled). The vulnerability allows remote attackers to cause a denial of service by requesting a long directory consisting of '.' and '/' characters, which crashes the server when an administrator views the log file ...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

Xlight FTP Server 1.52 - Remote Send File Request Denial of Service

source: https://www.securityfocus.com/bid/9668/info A remote denial of service vulnerability has been reported to exist in the Send File Request functionality of the XLight FTP server. Due to this issue a remote attacker may be able cause the affected server to crash, denying service to legitimat...

Xlight FTP Server Multiple Remote Overflows

The remot ehost is running a verion of the Xlight FTP server earlier than 1.53. Such versions are reportedly affected by multiple remote buffer overflow vulnerabilities. An attacker could exploit these flaws in order to crash the affected service. C Tenable Network Security, Inc. Ref: From: "intu...

Xlight FTP Server 1.52 - Remote Send File Request Denial of Service

Xlight FTP Server 1.52 - Remote Send File Request Denial of Service source: https://www.securityfocus.com/bid/9668/info A remote denial of service vulnerability has been reported to exist in the Send File Request functionality of the XLight FTP server. Due to this issue a remote attacker may be...

Xlight ftp server 1.52 RETR bug

Application: Xlight ftp server http://www.xlightftpd.com/ Version: 1.52 Bug: Denial Of Service Author: intuit e-mail: [email protected] web: http://rootshells.tk/ 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description: "Xlight ft...

Remote crash Xlight ftp server 1.52

Application: Xlight ftp server http://www.xlightftpd.com Version: 1.52 Bug: Denial Of Service Author: intuit e-mail: [email protected] web/forum: http://code.unixserver.at 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description:...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be possible for a remote attacker to deny service to legitimate users of the...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be...

Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow

Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable softwar...

Xlight FTP Server 1.25/1.41 - 'PASS' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents itself when an attacker sends a...

[NT] Xlight FTP Server Directory Traversal and DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...