PT-2007-3651 · Filezilla · Filezilla

Publicado 2007-04-26 · Atualizado 2008-11-13 · CVE-2007-2318

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FileZilla versions prior to 2.2.32

Description The issue involves multiple format string vulnerabilities that allow remote attackers to execute arbitrary code. This can be achieved through format string specifiers in FTP server responses or data sent by an FTP server.

Recommendations For versions prior to 2.2.32, update to version 2.2.32 or later to resolve the issue. As a temporary workaround, consider restricting access to FTP servers until the update is applied.

Correção

Identificadores relacionados

CVE-2007-2318

Produtos afetados

Filezilla

Referências · 9

• http://secunia.com/advisories/24894 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-2318 · Aviso do Fabricante
• http://securityfocus.com/bid/23506 · Correção
• http://osvdb.org/34437 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=501534&group_id=21558 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-2318 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2007-2318 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2318 · Aviso do Fabricante
• http://osvdb.org/34436 · Nota