First published: Thu Mar 24 2005(Updated: )
FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
FileZilla Server | <0.9.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0850 is classified as a denial of service vulnerability that can disrupt the operation of the FileZilla FTP server.
To mitigate CVE-2005-0850, upgrade to FileZilla Server version 0.9.6 or later.
CVE-2005-0850 affects all versions of FileZilla FTP server prior to 0.9.6.
Yes, CVE-2005-0850 can be exploited remotely by sending crafted requests to the FileZilla FTP server.
CVE-2005-0850 enables a remote denial of service attack that can render the FTP server unresponsive.