Vulnerability Details CVE-2004-0255
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 88.8%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2004-0255
-
cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.25
-
cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.41
-
cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.45
-
cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.52