CVE-2008-5626

XM Easy Personal FTP Server 5.6.0 - DoS

Title source: llm

Description

XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Jonathan Salwan · cdoswindows
https://www.exploit-db.com/exploits/8294
exploitdb WORKING POC VERIFIED
by shinnai · pythondoswindows
https://www.exploit-db.com/exploits/6741
metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/xmeasy560_nlst.rb
metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/xmeasy570_nlst.rb

Scores

EPSS 0.8307
EPSS Percentile 99.3%

Details

CWE
CWE-399
Status published
Products (1)
dxmsoft/xm_easy_personal_ftp_server 5.6.0
Published Dec 17, 2008
Tracked Since Feb 18, 2026