CVE-2004-0287: Xlight FTP Server

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.

Affected products

• Xlight FTP Server Xlight FTP Server: version 1.52 only

Published 2004-11-23. Last modified 2026-06-16.