CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

7.38% chance of exploitation in the next 30 days, 94th percentile

Published

2004-03-18

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23654

References

• CVE Record
• NVD entry

Related

• CVE-2004-0254
• CVE-2004-0261
• CVE-2004-0251
• CVE-2004-0264
• CVE-2004-0249
• CVE-2004-0265