CVE-2006-6565

FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which…

published December 15, 2006

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
71%
Percentile
99.4
In the wild
Unconfirmed
What it is

FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a different set of vectors than CVE-2006-6564. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.70588 · 99.4th percentile
Published
2006-12-15T11:00Z
EPSS history
Timeline
  • 15 DEC 11:00Z
    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which…
    cvelistv5