CVE-2006-6564
FileZilla < 0.9.21 - Denial of Service via Malformed STOR Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6564. PoCs published by rgod.
AI-analyzed exploit summary This exploit triggers a denial-of-service (DoS) in FileZilla FTP Server 0.9.20/0.9.21 by sending malformed STOR commands with excessive path traversal sequences, causing an access violation. The PoC demonstrates the crash via socket interactions and includes debug output showing the exception.
Description
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to the STOR command, which results in a NULL pointer dereference. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command.
Exploits (2)
This exploit triggers a denial-of-service (DoS) in FileZilla FTP Server 0.9.20/0.9.21 by sending malformed STOR commands with excessive path traversal sequences, causing an access violation. The PoC demonstrates the crash via socket interactions and includes debug output showing the exception.
This PHP script exploits a denial-of-service vulnerability in FileZilla FTP Server 0.9.20 beta / 0.9.21 by sending malformed LIST, NLST, or NLST -al commands after authentication. The exploit triggers a crash by sending junk data in PASV, PORT, and LIST commands.