CVE-2008-5105
UnknownEPSS 2.73%
Last modified
CVE-2008-5105 is a vulnerability of currently unknown severity. KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands.. EPSS estimates a 2.73% chance of exploitation in the next 30 days.
Description
KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Karjasoft | Sami Ftp Server | 2.0.0 |
| Karjasoft | Sami Ftp Server | 2.0.1 |
| Karjasoft | Sami Ftp Server | 2.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5105?
KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands.
How severe is CVE-2008-5105?
Severity scoring for CVE-2008-5105 is pending analysis. The EPSS model estimates a 2.73% probability of exploitation in the next 30 days.
How do I fix CVE-2008-5105?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5099Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 th…
- CVE-2008-5100The strong name (SN) implementation in Microsoft .NET Framew…
- CVE-2008-5101Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 a…
- CVE-2008-5102PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga…
- CVE-2008-5103The (1) python-vm-builder and (2) ubuntu-vm-builder implemen…
- CVE-2008-5104Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as…
- CVE-2008-5106Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows re…
- CVE-2008-5107The installation process for Citrix Presentation Server 4.5 …
- CVE-2008-5108Unspecified vulnerability in Adobe AIR 1.1 and earlier allow…
- CVE-2008-5109The default configuration of Adobe Flash Media Server (FMS) …
- CVE-2008-5110syslog-ng does not call chdir when it calls chroot, which mi…
- CVE-2008-5111Unspecified vulnerability in the socket function in Sun Sola…
Are you affected by CVE-2008-5105?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST