Korean
<< Back
VID 16139
Severity 30
Port 21
Protocol TCP
Class FTP
Detailed Description The FileZilla Server, according to its banner, has a Denial of Service vulnerability.
FileZilla Server is a freely available FTP server for Microsoft Windows platforms. FileZilla Server versions prior to 0.9.31 are An unspecified vulnerability in the SSL code for such versions can be exploited by a remote attacker to trigger a denial of service condition.

* Note: This check solely relied on the banner of the remote FTP server to assess this vulnerability, so this might be a false positive.

* References:
http://sourceforge.net/project/shownotes.php?release_id=665428

* Platforms Affected:
FileZilla Project, FileZilla Server versions prior to 0.9.31
Microsoft Windows Any version
Recommendation Upgrade to the latest version of FileZilla Server (0.9.31 or later), available from the Sourceforge.net Web site at http://sourceforge.net/project/showfiles.php?group_id=21558
Related URL CVE-2009-0884 (CVE)
Related URL 34006 (SecurityFocus)
Related URL (ISS)