Lucene search

K
cveMitreCVE-2006-6564
HistoryDec 15, 2006 - 11:28 a.m.

CVE-2006-6564

2006-12-1511:28:00
mitre
web.nvd.nist.gov
27
cve-2006-6564
filezilla server
denial of service
crash
remote attack

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.013

Percentile

86.1%

FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to the STOR command, which results in a NULL pointer dereference. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command.

Affected configurations

Nvd
Node
filezillafilezillaRange0.9.21
VendorProductVersionCPE
filezillafilezilla*cpe:2.3:a:filezilla:filezilla:*:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.013

Percentile

86.1%