The LDAP authentication feature in XLight FTP Server before 2.83,...

6.8 CVSS

Vulnerability Description

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0604

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from xlight ftp server

View All →

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause...

Medium 5

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers...

Medium 5

Affected Vendor

xlight ftp server

View all reports →

Affected Software

xlight ftp server

Vulnerable Versions:

Timeline

Official Publish: February 6th, 2008

Last Modified: September 16th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.