CVE-2024-0548 MEDIUM

CVE-2024-0548: FreeFloat FTP Server SIZE Command denial of service

Vendor Freefloat
Product FTP Server
Weakness CWE-404
Published January 15, 2024
Last update August 26, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250718 is the identifier assigned to this vulnerability.

Key dates

02Disclosure timeline

January 15, 2024 CVE published
August 26, 2024 Record updated