CVE-2007-2318 Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP s...
HighCVSS 9.3
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP server. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| filezilla | <= 2.2.31 | No fix listed |
| debian/filezilla(Debian:12) | < 3.0.0~beta2-3 | 3.0.0~beta2-3 |
| debian/filezilla(Debian:13) | < 3.0.0~beta2-3 | 3.0.0~beta2-3 |
| debian/filezilla(Debian:14) | < 3.0.0~beta2-3 | 3.0.0~beta2-3 |
References
- 34436 vdb-entry
- 34437 vdb-entry
- 24894 patch third-party-advisory vendor-advisory
- sourceforge.net patch
- 23506 patch vdb-entry
- Debian Security Tracker CVE-2007-2318 vendor-advisory
- bugs.debian.org issue-tracking