CVE-2004-0255: Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting...

Security readout for executives and security teams

CVE-2004-0255 is an old denial-of-service issue in Xlight 1.52. With log-to-screen enabled, a remote request using an unusually long dot/slash directory string can make the server crash when logs are viewed. The sources do not confirm active exploitation or a vendor patch. Exposure is most likely in legacy environments still running Xlight 1.52 FTP services with log-to-screen enabled. Modern environments are unlikely to be affected unless this specific legacy software remains deployed. Treat this as a legacy service risk. It is not confirmed as actively exploited, but internet-exposed FTP running old software can create outage and operational risk. Mitigation focus: Inventory for Xlight 1.52 FTP servers.; Disable log-to-screen where operationally acceptable.; Restrict FTP access to trusted networks during assessment..

Prepared

Jun 30, 2026, 06:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.