CVE-2008-1052

The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer…

published February 27, 2008

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06797 · 93.9th percentile
Published
2008-02-27T19:00Z
EPSS history
Timeline
  • 27 FEB 19:00Z
    The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer…
    cvelistv5