CVEvulnerability
CVE-2008-0604
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.
Affected configurations
• xlight ftp server xlight ftp server (<= 2.82)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/28755 Patch
- http://www.securityfocus.com/bid/27602 Patch
- http://www.xlightftpd.com/whatsnew.htm www.xlightftpd.com
- http://secunia.com/advisories/28755 Patch
- http://www.securityfocus.com/bid/27602 Patch
- http://www.xlightftpd.com/whatsnew.htm www.xlightftpd.com