AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-0604

MEDIUM · CVSS 6.8 EPSS 1.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-02-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It may be remotely exploitable.

CVE
CVE-2008-0604
Severity
MEDIUM
CVSS
6.8
EPSS
1.29%

Original NVD Description

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.