CyberRota Analysis
AI-GeneratedXlight FTP Server versions prior to 3.9.5 are vulnerable to a pre-authentication stack buffer overflow that can be exploited by unauthenticated attackers through specially crafted SSH packets. This vulnerability allows attackers to overwrite critical stack memory, potentially leading to remote code execution before authentication. Organizations using this FTP server should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets when a GCM cipher is negotiated. Attackers can craft packets with an unvalidated length field passed directly to the GCM decrypt function, overwriting the stack cookie and return address to potentially achieve remote code execution before any authentication occurs.