PT-2017-17022
CVE-2017-6367
·
Published
2017-03-14
·
Updated
2017-03-17
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Cerberus FTP Server version 8.0.10.1
Description
The issue involves a crafted HTTP request that can cause the Windows service to crash. This is achieved by including a long Host header and an invalid Content-Length header in the request.
Recommendations
For Cerberus FTP Server version 8.0.10.1, consider restricting access to the HTTP service until a patch is available to prevent potential crashes caused by maliciously crafted requests.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾