Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-0884

CWE-120 — Classic Buffer Overflow5 documents5 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 47.22%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Filezilla-project Filezilla Server
Timeline
PublishedMar 12
Latest updateMay 2

Description

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-82c9-gp53-cwg2: Buffer overflow in FileZilla Server before 0↗2022-05-02
▶
CVEList
CVE-2009-0884: Buffer overflow in FileZilla Server before 0↗2009-03-12
▶

💥Exploits & PoCs

1
Nuclei
FileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoS
▶

💬Community

1
Bugzilla
CVE-2009-0884 filezilla: buffer-overflow allows remote attackers to cause a denial of service↗2020-07-30
▶
CVE-2009-0884 (MEDIUM CVSS 4.3) | Buffer overflow in FileZilla Server | cvebase.io