Xlightftpd Xlight FTP Server Login denial of service
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 4.2%
from disclosure to weapon556 days
Published on NVDJan 19
1st PoC+556d
exploitation probability
4.2%top 10% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Xlightftpd · Xlight FTP Serverpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/52382unverifiedcve_referencepacketstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.