CVE-2008-5106
Last modified
CVE-2008-5106 is a vulnerability of currently unknown severity. Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console. NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212.. EPSS estimates a 12.59% chance of exploitation in the next 30 days.
Description
Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console. NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Karjasoft | Sami Ftp Server | 2.0.0 |
| Karjasoft | Sami Ftp Server | 2.0.1 |
| Karjasoft | Sami Ftp Server | 2.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5106?
How severe is CVE-2008-5106?
How do I fix CVE-2008-5106?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5100The strong name (SN) implementation in Microsoft .NET Framew…
- CVE-2008-5101Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 a…
- CVE-2008-5102PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga…
- CVE-2008-5103The (1) python-vm-builder and (2) ubuntu-vm-builder implemen…
- CVE-2008-5104Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as…
- CVE-2008-5105KarjaSoft Sami FTP Server 2.0.x allows remote attackers to c…
- CVE-2008-5107The installation process for Citrix Presentation Server 4.5 …
- CVE-2008-5108Unspecified vulnerability in Adobe AIR 1.1 and earlier allow…
- CVE-2008-5109The default configuration of Adobe Flash Media Server (FMS) …
- CVE-2008-5110syslog-ng does not call chdir when it calls chroot, which mi…
- CVE-2008-5111Unspecified vulnerability in the socket function in Sun Sola…
- CVE-2008-5112The LDAP server in Active Directory in Microsoft Windows 200…
Are you affected by CVE-2008-5106?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST