CVE-2005-3589

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 53%

from disclosure to weapon5 days

Published on NVDNov 16

1st PoC+5d

metasploitNov 7

exploitation probability

53%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/1336unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://ingehenriksen.blogspot.com/2005/11/filezilla-server-terminal-094d-dos-poc_21.html http://ingehenriksen.blogspot.com/2005/11/work-in-progress-filezilla-server.html http://marc.info/?l=bugtraq&m=113140190521377&w=2 http://sourceforge.net/project/shownotes.php?release_id=298735 http://www.osvdb.org/20817 http://www.securityfocus.com/archive/1/417307/30/0/threaded http://www.securityfocus.com/bid/15346