Description
Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- FileZilla FTP Server 2.2.22 - Buffer Overflow network/cves/2006/CVE-2006-2173.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- 17802 vdb-entry
- http://www.infigo.hr/en/in_focus/tools
- 20060502 FTP Fuzzer mailing-list
- 25221 vdb-entry
- http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03
- filezilla-port-pass-dos(26303) vdb-entry
- 20060508 INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities mailing-list