CVE-2006-2173: Buffer Overflow
Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2173?
CVE-2006-2173 is considered a critical vulnerability as it allows for denial of service and potential remote code execution.
How do I fix CVE-2006-2173?
To fix CVE-2006-2173, upgrade to the latest version of FileZilla Server that addresses this buffer overflow vulnerability.
What systems are vulnerable to CVE-2006-2173?
CVE-2006-2173 affects FileZilla FTP Server version 2.2.22 and possibly earlier versions.
What type of attack is possible with CVE-2006-2173?
CVE-2006-2173 can be exploited by remote authenticated attackers to launch denial of service attacks or execute arbitrary code.
Are there any known exploits for CVE-2006-2173?
Yes, CVE-2006-2173 has been demonstrated to be exploitable using tools like the Infigo FTPStress Fuzzer.