{"id":"CVE-2024-0548","state":"PUBLISHED","title":"FreeFloat FTP Server SIZE Command denial of service","description":"A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250718 is the identifier assigned to this vulnerability.","publishedAt":"2024-01-15T06:31:05.053Z","updatedAt":"2024-08-26T18:19:19.041Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"VulDB"},"assigner":"VulDB","products":["FreeFloat FTP Server"],"affected":[{"vendor":"FreeFloat","product":"FTP Server","versions":[{"version":"1.0","status":"affected"}],"modules":["SIZE Command Handler"]}],"references":["https://vuldb.com/?id.250718","https://vuldb.com/?ctiid.250718","https://packetstormsecurity.com/files/163038/FreeFloat-FTP-Server-1.0-Denial-Of-Service.html"],"weaknesses":["CWE-404"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/0xxx/CVE-2024-0548.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-0548","state":"PUBLISHED","datePublished":"2024-01-15T06:31:05.053Z","dateUpdated":"2024-08-26T18:19:19.041Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-01-14T19:18:11.678Z"},"containers":{"cna":{"title":"FreeFloat FTP Server SIZE Command denial of service","descriptions":[{"lang":"en","value":"A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250718 is the identifier assigned to this vulnerability."},{"lang":"de","value":"Eine Schwachstelle wurde in FreeFloat FTP Server 1.0 gefunden. Sie wurde als problematisch eingestuft. Betroffen davon ist ein unbekannter Prozess der Komponente SIZE Command Handler. Mittels Manipulieren mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"FreeFloat","product":"FTP Server","versions":[{"version":"1.0","status":"affected"}],"modules":["SIZE Command Handler"]}],"references":[{"url":"https://vuldb.com/?id.250718","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.250718","tags":["signature","permissions-required"]},{"url":"https://packetstormsecurity.com/files/163038/FreeFloat-FTP-Server-1.0-Denial-Of-Service.html","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-404","type":"CWE","lang":"en","description":"CWE-404 Denial of Service"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-01-15T06:31:05.053Z"},"timeline":[{"time":"2024-01-14T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-01-14T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-01-14T20:23:18.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"fernando.mengali (VulDB User)","type":"reporter"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.250718","tags":["vdb-entry","x_transferred"]},{"url":"https://vuldb.com/?ctiid.250718","tags":["signature","permissions-required","x_transferred"]},{"url":"https://packetstormsecurity.com/files/163038/FreeFloat-FTP-Server-1.0-Denial-Of-Service.html","tags":["exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T18:11:35.629Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"freefloat_ftp_server_project","product":"freefloat_ftp_server","defaultStatus":"unknown","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:freefloat_ftp_server_project:freefloat_ftp_server:1.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-26T18:09:57.432893Z","id":"CVE-2024-0548","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-26T18:19:19.041Z"}}]}}}