CVE-2008-6534

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE…

published March 26, 2009

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" (ampersand) in the middle of an argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04125 · 90.8th percentile
Published
2009-03-26T20:28Z
EPSS history
Timeline
  • 26 MAR 20:28Z
    Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE…
    cvelistv5