CVE-2006-6565 FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a...
MediumCVSS 4.0
EPSS 71.2%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a different set of vectors than CVE-2006-6564. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| filezilla-project filezilla server | < 0.9.22 | 0.9.22 |
References
- sourceforge.net product third-party-advisory
- ADV-2006-4937 third-party-advisory vdb-entry
- filezilla-commands-dos(30853) third-party-advisory vdb-entry
- 2914 exploit third-party-advisory vdb-entry