CVE-2004-0255

Опубликовано: 23 нояб. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.

Ссылки

http://marc.info/?l=bugtraq&m=107605633904122&w=2
http://www.securityfocus.com/bid/9585
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15064
http://marc.info/?l=bugtraq&m=107605633904122&w=2
http://www.securityfocus.com/bid/9585
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15064

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.25:*:*:*:*:*:*:*

cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.41:*:*:*:*:*:*:*

cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.45:*:*:*:*:*:*:*

cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.52:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04656

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fgq5-97jj-jmcq

github

почти 4 года назад