Vulnerability · Published Dec 15, 2025 · Assigned by VulnCheck
CVE-2023-53886Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program
Medium 5.1
In plain English
A medium-severity stack buffer overflow in Xlight FTP Server from Xlightftpd. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 4.0)5.1Medium
Exploit odds (30 days)0.4%top 63.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Xlightftpd | Xlight FTP Server | 3.9.3.6 |
Weakness: CWE-121 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References
- ExploitDB-51665 exploit
- XLight FTP Server product
- VulnCheck Advisory: Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program third-party-advisory