Buffer Overflow Vulnerability in LightFTP Affects Remote Access Security
CVE-2017-1000218

9.8CRITICAL

Key Information:

Vendor

Lightftp Project

Status
Lightftp
Vendor
CVE Published:
17 November 2017

What is CVE-2017-1000218?

LightFTP version 1.1 contains a critical buffer overflow vulnerability within the 'writelogentry' function. This flaw may allow attackers to exploit the system, leading to potential denial of service conditions or unauthorized remote code execution. Users are advised to review their systems for this vulnerability and apply necessary updates to mitigate risks associated with this issue.

References

https://github.com/hfiref0x/LightFTP/issues/5
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.