CVE-2006-2173 FileZilla FTP Server 2.2.22 - Buffer Overflow

漏洞描述

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.

影响产品

filezilla-projectfilezilla_server查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/26303↗marc.infohttp://marc.info/?l=bugtraq&m=114658586018818&w=2↗www.infigo.hrhttp://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03↗www.securityfocus.comhttp://www.securityfocus.com/bid/17802↗www.osvdb.orghttp://www.osvdb.org/25221↗archives.neohapsis.comhttp://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html↗www.infigo.hrhttp://www.infigo.hr/en/in_focus/tools↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2014-0224 CVE-2014-0224 OpenSSL Node.js Fedora+3	高危	7.4	93.1%	PoCEXP	2014/06/05
CVE-2009-0884 FileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoS filezilla_server	中危	4.3	—	PoCEXP	2009/03/12
CVE-2006-6565 FileZilla Server < 0.9.22 - DoS via Wildcard Commands filezilla_server	中危	4.0	—	PoCEXP	2006/12/15
CVE-2005-0851 FileZilla Server < 0.9.6 - DoS via MODE Z Infinite Loop filezilla_server	中危	5.0	—	PoCEXP	2005/05/02
CVE-2005-0850 FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names filezilla_server	中危	5.0	—	PoCEXP	2005/05/02

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞