CVE-2006-2173

6.4

CVSS

Description

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.

Attack Vector

Privileges Req.

User Interaction

Updated Nov 10, 2026View on NVD →

S4E scanner

mediumNetwork Vulnerabilities~10 seconds

FileZilla FTP Server 2.2.22 - Buffer Overflow

FileZilla FTP Server version 2.2.22 contains a buffer overflow vulnerability that allows remote authenticated attackers to cause denial of service and potentially execute arbitrary code. The vulnerability can be triggered by sending excessively long PORT or PASS commands followed by MLSD commands, or through the remote interface. References: http://marc.info/?l=bugtraq&m=114658586018818&w=2 http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 https://exchange.xforce.ibmcloud.com/vulnerabilities/26303

Used 18 times · 9 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →