Lucene search

K
cveMitreCVE-2007-2318
HistoryApr 26, 2007 - 9:19 p.m.

CVE-2007-2318

2007-04-2621:19:00
mitre
web.nvd.nist.gov
50
filezilla
cve-2007-2318
format string
vulnerability
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.033

Percentile

91.4%

Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP server. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
filezillafilezillaRange2.2.31
VendorProductVersionCPE
filezillafilezilla*cpe:2.3:a:filezilla:filezilla:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.033

Percentile

91.4%