PatchTheCVEfilezilla server vulnerabilities and fixes
Recent CVEs affecting filezilla server, with upgrade or downgrade steps. 7 tracked.
Also searched as: filezillaserver.
filezilla server has 7 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 6. Most recent: 2022-07-17. Highest priority: CVE-2014-0160 (score 91/100).
- CVE-2015-10003 MEDIUM 4.3 UPGRADE A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50
- CVE-2014-0160 HIGH 7.5 EXPLOITED UPGRADE UPGRADE OpenSSL Information Disclosure Vulnerability
- CVE-2009-0884 MEDIUM 4.3 UPGRADE Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via uns
- CVE-2006-6565 MEDIUM 4.0 UPGRADE FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard arg
- CVE-2006-2173 MEDIUM 6.4 MITIGATE Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of serv
- CVE-2005-0851 MEDIUM 5.0 UPGRADE FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a de
- CVE-2005-0850 MEDIUM 5.0 UPGRADE FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a fil
FAQ
How do I fix filezilla server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is filezilla server being exploited right now?
Yes: 1 filezilla server CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which filezilla server CVE should I patch first?
CVE-2014-0160 currently ranks highest (91/100): OpenSSL Information Disclosure Vulnerability.