CVE-2024-0737

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

Vendor	Product	Versions
Xlightftpd	Xlight FTP Server	1.1

References

https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
https://vuldb.com/?ctiid.251560Permissions Required, Third Party Advisory
https://vuldb.com/?id.251560Third Party Advisory
https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
https://vuldb.com/?ctiid.251560Permissions Required, Third Party Advisory
https://vuldb.com/?id.251560Third Party Advisory

Timeline

Published: Jan 19, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-07389.8A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of th CVE-2024-07399.8A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /CVE-2024-07409.8Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does CVE-2024-07416.5An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerabil CVE-2024-07424.3It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timesta CVE-2024-07437.5An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122,CVE-2024-07447.5In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vul CVE-2024-07458.8The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. Thi CVE-2024-07466.5A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR CVE-2024-07476.5When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Cont CVE-2024-07484.3A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the addres CVE-2024-07494.3A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerab