CVE-2024-0737: 
Xlight FTP Server vulnerability analysis and mitigation

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1, affecting the login component. The vulnerability allows remote attackers to cause a denial of service through manipulation of the user argument. The exploit has been publicly disclosed and may be used (NVD, PacketStorm).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 HIGH (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) by NIST, while VulDB rates it as 5.3 MEDIUM. The vulnerability is associated with CWE-404 (Improper Resource Shutdown or Release). The attack can be initiated remotely and requires no authentication or user interaction (NVD).

If exploited, this vulnerability can lead to denial of service conditions in the Xlight FTP Server. The attack affects the availability of the service while having no direct impact on confidentiality or integrity (NVD).

The vulnerability is exploitable remotely, and proof-of-concept code has been publicly disclosed. The attack requires low complexity and no special privileges or user interaction to execute (NVD, PacketStorm).