Test ID:	1.3.6.1.4.1.25623.1.0.102019
Category:	FTP
Title:	FileZilla Server < 0.9.22 'Port Command' DoS Vulnerability
Summary:	FileZilla Server is prone to a denial of service (DoS); vulnerability.
Description:	Summary: FileZilla Server is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The falw allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a different set of vectors than CVE-2006-6564. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command. Affected Software/OS: FileZilla Server versions prior to 0.9.32. Solution: Update to version 0.9.32 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6565 https://www.exploit-db.com/exploits/2914 http://www.vupen.com/english/advisories/2006/4937 XForce ISS Database: filezilla-commands-dos(30853) https://exchange.xforce.ibmcloud.com/vulnerabilities/30853
Copyright	Copyright (C) 2010 LSS

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.