PT-2007-3651 · Filezilla · Filezilla

Published 2007-04-26 · Updated 2008-11-13 · CVE-2007-2318

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FileZilla versions prior to 2.2.32

Description The issue involves multiple format string vulnerabilities that allow remote attackers to execute arbitrary code. This can be achieved through format string specifiers in FTP server responses or data sent by an FTP server.

Recommendations For versions prior to 2.2.32, update to version 2.2.32 or later to resolve the issue. As a temporary workaround, consider restricting access to FTP servers until the update is applied.

Fix

Related Identifiers

CVE-2007-2318

Affected Products

Filezilla

References · 9

• http://secunia.com/advisories/24894 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-2318 · Vendor Advisory
• http://securityfocus.com/bid/23506 · Patch
• http://sourceforge.net/project/shownotes.php?release_id=501534&group_id=21558 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2318 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-2318 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2318 · Vendor Advisory
• http://osvdb.org/34437 · Note
• http://osvdb.org/34436 · Note