CVE-2006-2173 - Vulnerability Details - OpenCVE

ReportizFlow

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Filezilla	Filezilla Server

Configuration 1 [-]

cpe:2.3:a:filezilla:filezilla_server:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
http://marc.info/?l=bugtraq&m=114658586018818&w=2
http://www.infigo.hr/en/in_focus/tools
http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03
http://www.osvdb.org/25221
http://www.securityfocus.com/bid/17802
https://exchange.xforce.ibmcloud.com/vulnerabilities/26303

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-05-04T10:00:00

Updated: 2024-08-07T17:43:27.814Z

Reserved: 2006-05-03T00:00:00

Link: CVE-2006-2173

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-05-04T12:38:00.000

Modified: 2024-11-21T00:10:43.353

Link: CVE-2006-2173

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-05-02T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "17802", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17802"}, {"tags": ["x_refsource_MISC"], "url": "http://www.infigo.hr/en/in_focus/tools"}, {"name": "20060502 FTP Fuzzer", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=114658586018818&w=2"}, {"name": "25221", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/25221"}, {"tags": ["x_refsource_MISC"], "url": "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03"}, {"name": "filezilla-port-pass-dos(26303)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303"}, {"name": "20060508 INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2006-2173", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "17802", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17802"}, {"name": "http://www.infigo.hr/en/in_focus/tools", "refsource": "MISC", "url": "http://www.infigo.hr/en/in_focus/tools"}, {"name": "20060502 FTP Fuzzer", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=114658586018818&w=2"}, {"name": "25221", "refsource": "OSVDB", "url": "http://www.osvdb.org/25221"}, {"name": "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03", "refsource": "MISC", "url": "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03"}, {"name": "filezilla-port-pass-dos(26303)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303"}, {"name": "20060508 INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:43:27.814Z"}, "title": "CVE Program Container", "references": [{"name": "17802", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17802"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.infigo.hr/en/in_focus/tools"}, {"name": "20060502 FTP Fuzzer", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=114658586018818&w=2"}, {"name": "25221", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/25221"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03"}, {"name": "filezilla-port-pass-dos(26303)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303"}, {"name": "20060508 INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-2173", "datePublished": "2006-05-04T10:00:00", "dateReserved": "2006-05-03T00:00:00", "dateUpdated": "2024-08-07T17:43:27.814Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:filezilla:filezilla_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "1F16B8A3-6613-43E6-A91F-8066A27EBDA5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en FileZilla FTP Server 2.2.22 permite a atacantes remotos autenticados provocar una denegaci\u00f3n de servicio y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de un (1) PORT o (2) PASS largo seguido por el comando MLSD, o (2) la interfaz del servidor remoto, seg\u00fan lo demostrado por el Infigo FTPStress Fuzzer."}], "id": "CVE-2006-2173", "lastModified": "2024-11-21T00:10:43.353", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-05-04T12:38:00.000", "references": [{"source": "[email protected]", "url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html"}, {"source": "[email protected]", "url": "http://marc.info/?l=bugtraq&m=114658586018818&w=2"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "http://www.infigo.hr/en/in_focus/tools"}, {"source": "[email protected]", "url": "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03"}, {"source": "[email protected]", "url": "http://www.osvdb.org/25221"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/17802"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=114658586018818&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.infigo.hr/en/in_focus/tools"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/25221"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/17802"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}