PT-2024-15648 · Unknown · Freefloat Ftp Server

Fernando.Mengali · Published 2024-01-14 · Updated 2024-05-17 · CVE-2024-0548

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeFloat FTP Server version 1.0

Description A vulnerability was found in the SIZE Command Handler component, which can lead to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For FreeFloat FTP Server version 1.0, consider disabling the SIZE Command Handler functionality as a temporary workaround until a patch is available. Restrict access to the SIZE command to minimize the risk of exploitation.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2024-0548

Affected Products

Freefloat Ftp Server

References · 9

• 🔥 https://packetstormsecurity.com/files/163038/FreeFloat-FTP-Server-1.0-Denial-Of-Service.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-0548 · Security Note
• https://osv.dev/vulnerability/CVE-2024-0548 · Vendor Advisory
• https://vuldb.com/?id.250718 · Note
• https://vuldb.com/?ctiid.250718 · Note
• https://t.me/cvenotify/67450 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1746860109794341069 · Twitter Post
• https://t.me/cvenotify/68250 · Telegram Post
• https://twitter.com/CVEnew/status/1746784464661786840 · Twitter Post