CVE-2008-0604: Xlight FTP Server

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.

Affected products

• Xlight FTP Server Xlight FTP Server: up to and including 2.82

Published 2008-02-06. Last modified 2026-06-16.