CVE-2008-0604 | BDVDB-2026-29039 Detail

Description#

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.xlightftpd.com/whatsnew.htm
http://www.securityfocus.com/bid/27602
http://secunia.com/advisories/28755

Exploit#

No public exploit known

History#

Version 12008-02-06Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.