xlight ftp server xlight ftp server vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Xlight 1.52, with log to screen enabled, allows remote malicious users to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buf...

Xlight Ftp Server Xlight Ftp Server 1.25 Xlight Ftp Server Xlight Ftp Server 1.41 Xlight Ftp Server Xlight Ftp Server 1.45 Xlight Ftp Server Xlight Ftp Server 1.52

1 EDB exploit

6.8

CVSSv2

Multiple SQL injection vulnerabilities in Xlight FTP Server prior to 3.2.1, when ODBC authentication is enabled, allow remote malicious users to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka password) command.

1 EDB exploit

6.8

CVSSv2

The LDAP authentication feature in XLight FTP Server prior to 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote malicious users to bypass intended access restrictions.

Xlight Ftp Server Xlight Ftp Server

5

CVSSv2

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.

Xlight Ftp Server Xlight Ftp Server 1.52

1 EDB exploit

6.5

CVSSv2

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions prior to 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. (dot dot) sequences in the (1) ls, (2) rm, (3) rena...

Xlightftpd Xlight Ftp Server 3.5 Xlightftpd Xlight Ftp Server 3.5.5

NA

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been di...

Xlightftpd Xlight Ftp Server 1.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook