PT-2005-4375 · Filezilla · Filezilla Server Terminal

Inge Henriksen · Published 2005-11-16 · Updated 2018-10-19 · CVE-2005-3589

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FileZilla Server Terminal version 0.9.4d

Description A buffer overflow issue may allow remote attackers to cause a denial of service, resulting in a terminal crash, by sending a long USER ftp command.

Recommendations For version 0.9.4d, consider updating to a newer version that addresses this issue, as using a long USER ftp command can cause a terminal crash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-3589

Affected Products

Filezilla Server Terminal

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/filezilla_admin_user.rb · Exploit
• 🔥 https://exploit-db.com/exploits/1336 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3589 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=298735 · Patch
• http://osvdb.org/20817 · Note
• http://ingehenriksen.blogspot.com/2005/11/filezilla-server-terminal-094d-dos-poc_21.html · Note
• http://ingehenriksen.blogspot.com/2005/11/work-in-progress-filezilla-server.html · Note
• http://marc.info/?l=bugtraq&m=113140190521377&w=2 · Note
• http://securityfocus.com/bid/15346 · Note
• http://securityfocus.com/archive/1/417307/30/0/threaded · Note