CVE-2009-4108

CVE-2009-4108 describes a denial-of-service vulnerability in XM Easy Personal FTP Server version 5.8.0. An authenticated remote attacker can crash the server by uploading or creating numerous files or directories, then executing a LIST command. This vulnerability has a CVSS score of 4.0, indicating a low severity, with an attack vector over the network, low attack complexity, requiring authentication, and resulting in partial availability impact. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.