CVE Daily

CVE-2008-5666

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote aut...

Low CVSS 3.5

Overview

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command.

CWE: CWE-399 Published: 2008-12-19T01:52:02.483
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 3.5 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags