CVE-2017-6367: Input Validation
Published Mar 14, 2017
·Updated
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header.
Affected Software
1 affected component
Cerberusftp Ftp Server=8.0.10.1
Event History
Mar 14, 2017
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Data Sourced
via NVD·09:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6367?
CVE-2017-6367 is considered a high severity vulnerability as it leads to a crash of the Cerberus FTP Server service.
2
How do I fix CVE-2017-6367?
To fix CVE-2017-6367, you should update Cerberus FTP Server to a version later than 8.0.10.1.
3
What types of attacks are possible with CVE-2017-6367?
CVE-2017-6367 can be exploited by sending crafted HTTP requests with long Host headers and invalid Content-Length headers.
4
Which versions of Cerberus FTP Server are affected by CVE-2017-6367?
CVE-2017-6367 specifically affects Cerberus FTP Server version 8.0.10.1.
5
Is there a workaround for CVE-2017-6367 if I can't update immediately?
A potential workaround for CVE-2017-6367 is to implement network-level controls to filter malicious HTTP requests.