CVE-2017-6367
HighSummary
In Cerberus FTP Server version 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack involves a long Host header and an invalid Content-Length header.
Risk Assessment
The service crash may lead to downtime of the FTP server, affecting organizational operations and potentially resulting in data loss.
Recommendation
It is recommended to update Cerberus FTP Server to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Cerberus FTP Server 8.0.10.1
See all- CVE-2017-6880Critical
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command.
- CVE-2026-82819High
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can coerce authentication against the underlying server, resulting in leakage of the Cerberus service account's Net-NTLMv2 hash.
- CVE-2026-6265High
An insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation. This issue has been resolved in Cerberus FTP Server: 2026.1.
Original NVD description (English source)
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS