CVE-2023-53886
Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program
- State
- Published
- Severity
- 5.1 Medium
- Published
- Dec 15, 2025
- Updated
- May 12, 2026
- Reserved
- Dec 13, 2025
Description
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-121 Stack-based Buffer Overflow
Affected Products
| Product | Versions |
|---|---|
Xlight FTP ServerXlightftpd |
|
References
- ExploitDB-51665exploit
- XLight FTP Serverproduct
- VulnCheck Advisory: Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Programthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.