VULNERABILITY INTELLIGENCE

CVE-2008-5666

CVSS score3.5 LOW
EPSS probability20.59%
CISA KEVNot currently listed
Published2008-12-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:N/A:P

Description

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command.

Primary references