CVE-2017-6367 In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header.
HighCVSS 7.5
EPSS 8.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cerberusftp ftp server | = 8.0.10.1 | No fix listed |