CyberRota Analysis
AI-GeneratedLightFTP versions up to 2.4 are vulnerable to multiple data race conditions in the ftpserv.c file, which can be exploited by anonymous attackers. By issuing LIST followed by ABOR commands, these attackers can trigger undefined behavior, potentially leading to denial of service due to improper handling of file descriptors. Organizations using LightFTP should prioritize patching this vulnerability to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands without authentication. The control thread closes data_socket and file_fd descriptors while worker threads concurrently operate on the same fields in worker_thread_cleanup, allowing stale file descriptors to be reassigned by the OS and subsequently used by worker threads on unrelated resources, resulting in potential denial of service.