Vulnerability record · CVE-2024-0737 · published 19 January 2024

CVE-2024-0737: Xlightftpd xlight ftp server improper resource shutdown vulnerability

Xlightftpd · Xlight Ftp Server

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.

7.5 CVSS 3.1 High EPSS 4.2% · top 9.4% CWE-404 · Improper resource shutdown

7.5CVSS 3.1 base score, v2 5.0

4.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Xlight Ftp Server Xlightftpd

References

Link	Tags
https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html	ExploitThird Party AdvisoryVDB Entry
https://vuldb.com/?ctiid.251560	Permissions RequiredThird Party Advisory
https://vuldb.com/?id.251560	Third Party Advisory
https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html	ExploitThird Party AdvisoryVDB Entry
https://vuldb.com/?ctiid.251560	Permissions RequiredThird Party Advisory
https://vuldb.com/?id.251560	Third Party Advisory

Track CVE-2024-0737 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.6CVE-2019-25681Xlightftpd xlight ftp server out-of-bounds write vulnerabilityXlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attackers to crash the application an…EPSS 0.21%5 Apr 2026 6.8CVE-2009-4795Xlightftpd xlight ftp server sql injection vulnerabilityMultiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbi…EPSS 2.0%22 Apr 2010 6.5CVE-2010-2695Xlightftpd xlight ftp server path traversal vulnerabilityDirectory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows re…EPSS 1.9%12 Jul 2010 5.1CVE-2023-53886Xlightftpd xlight ftp server stack-based buffer overflow vulnerabilityXlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the ap…EPSS 0.43%15 Dec 2025 7.8CVE-2018-8639Windows Win32k memory handling flaw allows privilege elevationThe Win32k component in Windows fails to properly handle objects in memory, creating an elevation of privilege vulnerability. It affects a broad rang…KEVEPSS 22%analysed12 Dec 2018 7.8CVE-2018-8611Windows Kernel Memory Handling Elevation of PrivilegeThe Windows kernel fails to properly handle objects in memory, allowing a local attacker to elevate privileges. The flaw affects a broad set of Windo…KEVEPSS 4.2%analysed12 Dec 2018 7.8CVE-2018-8406Microsoft DirectX Graphics Kernel driver elevation of privilegeThe DirectX Graphics Kernel (DXGKRNL) driver mishandles objects in memory, allowing a local attacker to elevate privileges. It affects Windows 10, Wi…KEVEPSS 3.4%analysed15 Aug 2018 7.8CVE-2018-8405Microsoft DirectX Graphics Kernel driver elevation of privilegeThe DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, allowing an elevation of privilege on affected Windows client and …KEVEPSS 3.4%analysed15 Aug 2018

Source: NIST National Vulnerability Database (record CVE-2024-0737), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.