PT-2022-7808 · Filezilla · Filezilla Server

Amit Klein · Published 2022-07-17 · Updated 2022-07-25 · CVE-2015-10003

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions FileZilla Server versions up to 0.9.50

Description A problematic vulnerability was found in the PORT Handler component of FileZilla Server, allowing for remote attacks that lead to unintended intermediary. The issue can be addressed by upgrading to version 0.9.51.

Recommendations For versions up to 0.9.50, upgrade to version 0.9.51 to address the issue.

Fix

Weakness Enumeration

CWE-610

CWE-441

Related Identifiers

CVE-2015-10003

Affected Products

Filezilla Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-10003 · Security Note
• http://securitygalore.com/site3/filezilla_ftp_server_advisory · Patch
• https://vuldb.com/?id.97203 · Note
• https://t.me/cibsecurity/46381 · Telegram Post
• https://t.me/cvenotify/33222 · Telegram Post