CVE-2008-6534

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" (ampersand) in the middle of an argument.

CVSS v2.0

7.1 HIGHAV:N/AC:H/Au:S/C:C/I:C/A:C

EPSS

4.12% chance of exploitation in the next 30 days, 90th percentile

Published

2009-03-26

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/7355

References

• CVE Record
• NVD entry

Related

• CVE-2008-6530
• CVE-2008-6535
• CVE-2008-6529
• CVE-2008-6537
• CVE-2008-6528
• CVE-2008-6538