CVE-2014-0160

CVE-2014-0160 (Heartbleed) is an information-disclosure vulnerability in OpenSSL’s TLS/DTLS heartbeat implementation. Affected: OpenSSL 1.0.1 before 1.0.1g. Root cause: improper handling of the Heartbeat extension (d1_both.c, t1_lib.c) leading to a buffer over-read, enabling an attacker to read m...

CVE-2014-0224

The OpenSSL library (versions before 0.9.8za , 1.0.0 before 1.0.0m , and 1.0.1 before 1.0.1h ) is vulnerable to the CCS Injection vulnerability. The issue stems from an improper limitation on processing ChangeCipherSpec messages, allowing a man-in-the-middle attacker to trigger the use of a zero-...

CVE-2015-10003

FileZilla Server up to 0.9.50 is affected by CVE-2015-10003, with the issue localized in the PORT Handler component. The description indicates an unspecified manipulation yielding an unintended intermediary, and that the issue can be exploited remotely. Upgrading to version 0.9.51 is stated as th...

CVE-2006-6565

FileZilla Server is affected by CVE-2006-6565: prior to version 0.9.22, remote attackers can cause a denial-of-service (crash) by sending a wildcard argument to LIST or NLST commands, leading to a NULL pointer dereference. The issue is related to malformed PORT handling in some vectors; an upgrad...

CVE-2009-0884

FileZilla Server

CVE-2005-0850

Vulnerability summary (CVE-2005-0850): FileZilla FTP Server prior to 0.9.6 is susceptible to denial of service when a client requests a filename containing MS-DOS device names (e.g., CON, NUL, COM1, LPT1). The issue is confirmed in multiple security feeds, and related Nessus findings also describ...

CVE-2005-0851

CVE-2005-0851 affects the FileZilla FTP Server up to version 0.9.6. When using MODE Z (zlib compression), it can trigger a denial-of-service via certain file uploads or directory listings, causing an infinite loop. The vulnerability is associated with a NETWORK attack vector, with low complexity ...