CVE-2008-5105

KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://securityreason.com/securityalert/4603
http://www.securityfocus.com/archive/1/488198/100/200/threaded
http://www.securityfocus.com/bid/27817
http://securityreason.com/securityalert/4603
http://www.securityfocus.com/archive/1/488198/100/200/threaded
http://www.securityfocus.com/bid/27817

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:karjasoft:sami_ftp_server:2.0.0:::::::*
	cpe:2.3:a:karjasoft:sami_ftp_server:2.0.1:::::::*
	cpe:2.3:a:karjasoft:sami_ftp_server:2.0.2:::::::*

History

21 Nov 2024, 00:53

Type	Values Removed	Values Added
References	~~() http://securityreason.com/securityalert/4603 -~~	() http://securityreason.com/securityalert/4603 -
References	~~() http://www.securityfocus.com/archive/1/488198/100/200/threaded -~~	() http://www.securityfocus.com/archive/1/488198/100/200/threaded -
References	~~() http://www.securityfocus.com/bid/27817 -~~	() http://www.securityfocus.com/bid/27817 -

Information

Published : 2008-11-17 18:18

Updated : 2024-11-21 00:53

NVD link : CVE-2008-5105

Mitre link : CVE-2008-5105

CVE.ORG link : CVE-2008-5105

JSON object : View

Products Affected

karjasoft

sami_ftp_server

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2008-5105", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-11-17T18:18:48.077", "references": [{"url": "http://securityreason.com/securityalert/4603", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/488198/100/200/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27817", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/4603", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/488198/100/200/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/27817", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands."}, {"lang": "es", "value": "El servidor FTP KarjaSoft Sami FTP Server 2.0.x permite a atacantes remotos causar una denegaci\u00f3n de servicio (caida o bloqueo del demonio) a trav\u00e9s de algunos comandos (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, ( 6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, y (10) STOR."}], "lastModified": "2024-11-21T00:53:17.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:karjasoft:sami_ftp_server:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "218CACF2-A382-4483-9319-889B9E2FB208"}, {"criteria": "cpe:2.3:a:karjasoft:sami_ftp_server:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE91DCB5-8314-473B-A8D0-06B53B02FC51"}, {"criteria": "cpe:2.3:a:karjasoft:sami_ftp_server:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "075B214B-CFFE-408E-B341-FF9C5B43A51E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}