PatchTheCVEfilezilla vulnerabilities
Recent CVEs affecting filezilla products. 8 tracked.
filezilla has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2007-04-26. Highest priority: CVE-2005-3589 (score 57/100).
- CVE-2007-2318 HIGH 9.3 UPGRADE Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary
- CVE-2007-0317 HIGH 7.5 UPGRADE Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers
- CVE-2007-0315 HIGH 9.3 UPGRADE Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or caus
- CVE-2006-6564 MEDIUM 4.0 UPGRADE FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed ar
- CVE-2006-2403 HIGH 7.5 DOWNGRADE Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown a
- CVE-2006-2173 MEDIUM 6.4 MITIGATE Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of serv
- CVE-2005-3589 HIGH 7.8 DOWNGRADE Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (t
- CVE-2005-2898 MEDIUM 4.6 DOWNGRADE NOTE: this issue has been disputed by the vendor
FAQ
How do I fix filezilla vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is filezilla being exploited right now?
None of the tracked filezilla CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which filezilla CVE should I patch first?
CVE-2005-3589 currently ranks highest (57/100): Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (t.