Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xmrm-f5h6-fxm7

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error.

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error.

EPSS

Процентиль: 34%
0.00137
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-193

Связанные уязвимости

CVSS3: 5.5
nvd
около 21 года назад

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error.

EPSS

Процентиль: 34%
0.00137
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-193