FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names
FileZilla Server versions prior to 0.9.6 are vulnerable to denial of service when processing filenames containing MS-DOS device names such as CON, NUL, COM1, LPT1, and others. Remote attackers can cause the server to crash or become unresponsive by requesting files with these reserved device names. References: http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473
9 assets checked · domain, subdomain, ipv4