CVE-2017-6880
CriticalSummary
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the FTP server's operation, potentially leading to service downtime and data unavailability.
Recommendation
It is recommended to update Cerberus FTP Server to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Cerberus FTP Server 8.0.10.3
See all- CVE-2017-6367High
In Cerberus FTP Server version 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack involves a long Host header and an invalid Content-Length header.
- CVE-2026-82819High
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can coerce authentication against the underlying server, resulting in leakage of the Cerberus service account's Net-NTLMv2 hash.
- CVE-2026-6265High
An insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation. This issue has been resolved in Cerberus FTP Server: 2026.1.
Original NVD description (English source)
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS