CVE-2024-1016

A vulnerability was found in Solar FTP Server 2.1.1/2.1.2. It has been declared as problematic. This vulnerability affects unknown code of the component PASV Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-252286 is the identifier assigned to this vulnerability.
References
Link Resource
https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html Exploit Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.252286 Permissions Required Third Party Advisory
https://vuldb.com/?id.252286 Third Party Advisory
https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html Exploit Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.252286 Permissions Required Third Party Advisory
https://vuldb.com/?id.252286 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:flexbyte:solar_ftp_server:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:flexbyte:solar_ftp_server:2.1.2:*:*:*:*:*:*:*

History

21 Nov 2024, 08:49

Type Values Removed Values Added
CVSS v2 : 5.0
v3 : 7.5
v2 : 5.0
v3 : 5.3
References () https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html - Exploit, Third Party Advisory, VDB Entry () https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html - Exploit, Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.252286 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.252286 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.252286 - Third Party Advisory () https://vuldb.com/?id.252286 - Third Party Advisory

05 Feb 2024, 17:25

Type Values Removed Values Added
First Time Flexbyte
Flexbyte solar Ftp Server
CPE cpe:2.3:a:flexbyte:solar_ftp_server:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:flexbyte:solar_ftp_server:2.1.1:*:*:*:*:*:*:*
References () https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html - () https://packetstormsecurity.com/files/176675/Solar-FTP-Server-2.1.2-Denial-Of-Service.html - Exploit, Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.252286 - () https://vuldb.com/?id.252286 - Third Party Advisory
References () https://vuldb.com/?ctiid.252286 - () https://vuldb.com/?ctiid.252286 - Permissions Required, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

29 Jan 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-29 18:15

Updated : 2024-11-21 08:49


NVD link : CVE-2024-1016

Mitre link : CVE-2024-1016

CVE.ORG link : CVE-2024-1016


JSON object : View

Products Affected

flexbyte

  • solar_ftp_server
CWE
CWE-404

Improper Resource Shutdown or Release