CVE-2009-0884

Published: Mar 12, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets.

Affected (1)

Products: Filezilla Project: Filezilla Server

Filezilla Project

1 product

Filezilla Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Filezilla Project Filezilla Server	Before 0.9.31

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (14)

http://filezilla-project.org/index.php

Source: cve@mitre.org

Release NotesVendor Advisory

http://secunia.com/advisories/34089

Source: cve@mitre.org

Third Party Advisory

http://sourceforge.net/project/shownotes.php?release_id=665428

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/34006

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1021812

Source: cve@mitre.org

Third Party AdvisoryVDB EntryVendor Advisory

http://www.vupen.com/english/advisories/2009/0603

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49107

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://filezilla-project.org/index.php