CVE-2024-1016

A vulnerability was found in Solar FTP Server 2.1.1/2.1.2. It has been declared as problematic. This vulnerability affects unknown code of the component PASV Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-252286 is the identifier assigned to this vulnerability.
References
Link Resource
https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html Exploit Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.252286 Permissions Required Third Party Advisory
https://vuldb.com/?id.252286 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:flexbyte:solar_ftp_server:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:flexbyte:solar_ftp_server:2.1.2:*:*:*:*:*:*:*

History

05 Feb 2024, 17:25

Type Values Removed Values Added
References () https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html - () https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html - Exploit, Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.252286 - () https://vuldb.com/?ctiid.252286 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.252286 - () https://vuldb.com/?id.252286 - Third Party Advisory
First Time Flexbyte
Flexbyte solar Ftp Server
CVSS v2 : 5.0
v3 : 5.3
v2 : 5.0
v3 : 7.5
CPE cpe:2.3:a:flexbyte:solar_ftp_server:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:flexbyte:solar_ftp_server:2.1.1:*:*:*:*:*:*:*

29 Jan 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-29 18:15

Updated : 2024-05-17 02:35


NVD link : CVE-2024-1016

Mitre link : CVE-2024-1016

CVE.ORG link : CVE-2024-1016


JSON object : View

Products Affected

flexbyte

  • solar_ftp_server
CWE
CWE-404

Improper Resource Shutdown or Release