CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which…

published February 6, 2008

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01294 · 69.9th percentile
Published
2008-02-06T11:00Z
EPSS history
Timeline
  • 06 FEB 11:00Z
    The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which…
    cvelistv5