Описание
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.
Ссылки
- ExploitThird Party Advisory
- Third Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:xlightftpd:xlight_ftp_server:3.9.3.6:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
7.5 High
CVSS3
Дефекты
CWE-121
CWE-787
Связанные уязвимости
CVSS3: 7.5
github
около 2 месяцев назад
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.
EPSS
Процентиль: 19%
0.00061
Низкий
7.5 High
CVSS3
Дефекты
CWE-121
CWE-787