CVE-2005-3589

The CVE-2005-3589 entry describes a buffer overflow in FileZilla Server Terminal (0.9.4d and earlier) that enables remote denial of service by sending an excessively long USER command to the FTP server. Connected documents corroborate a Denial of Service vector against the FileZilla FTP Server Ad...

CVE-2005-3589

Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service terminal crash via a long USER ftp command...

CVE-2005-3589: Undefined Security Weakness

Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service terminal crash via a long USER ftp command...

FileZilla FTP Server buffer overflow

Buffer overflow on oversized FTP USER command...

Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow

Inge Henriksen Security Advisory [email protected] I have discovered a buffer overflow in FileZilla Server Terminal 0.9.4d. The exploit is still to be considered as a work in progress as it is still not clear to me why the exploit works on some systems and not others. Please let me...

FileZilla FTP Server Admin Interface Denial of Service

This module triggers a Denial of Service condition in the FileZilla FTP Server Administration Interface in versions 0.9.4d and earlier. By sending a procession of excessively long USER commands to the FTP Server, the Administration Interface FileZilla Server Interface.exe when running, will...

FileZilla FTP client information leak

Configuration including FTP sites access passwords is stored in public directory...

[Full-disclosure] FileZilla (client) public credentials vulnerability

Title: FileZilla client public credentials vulnerability Risk: Medium Versions affected: =2.2.15 Credits: pagvac Adrian Pastor Date found: 10th September, 2005 Homepage: www.ikwt.com www.adrianpv.com E-mail: m123303 - a t - richmond.ac.uk Background ---------- FileZilla client is an open source...

CVE-2005-2898

NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...

CVE-2005-2898

FileZilla vulnerability CVE-2005-2898 affects versions 2.2.14b–2.2.15 (and possibly earlier) where, if “Use secure mode” is disabled, passwords are stored using a weak encryption scheme in the configuration file. This allows local users to obtain sensitive information. The issue is disputed by th...

CVE-2005-2898

NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...

PT-2005-3760 · Filezilla · Filezilla

Name of the Vulnerable Software and Affected Versions: FileZilla versions 2.2.14b through 2.2.15 FileZilla versions prior to 2.2.14b Description: The issue concerns the use of a weak encryption scheme to store user passwords in the configuration settings file when "Use secure mode" is disabled...

CVE-2005-2898: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...

filezillaWeak.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: FileZilla weakly-encrypted password vulnerability Risk: HIGH Credits: pagvac Adrian Pastor Date found: 6th August, 2005 Homepage: www.ikwt.com www.adrianpv.com E-mail: m123303 - at - richmond.ac.uk Background - ----------- FileZilla is the most...

FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key

FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key // source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in a...

FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key

// source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in an XML file or the Windows Registry. This can allow t...

CVE-2005-0850

FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others...

CVE-2005-0851

FileZilla FTP server before 0.9.6, when using MODE Z zlib compression, allows remote attackers to cause a denial of service infinite loop via certain file uploads or directory listings...

CVE-2005-0850

FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others...

CVE-2005-0851

FileZilla FTP server before 0.9.6, when using MODE Z zlib compression, allows remote attackers to cause a denial of service infinite loop via certain file uploads or directory listings...