CVE-2005-0850 PoC — FileZilla FTP Server多个远程拒绝服务漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2005/CVE-2005-0850.yaml

Associated Vulnerability

Title: FileZilla FTP Server多个远程拒绝服务漏洞 (CVE-2005-0850)
Description:FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others.

Description

FileZilla Server versions prior to 0.9.6 are vulnerable to denial of service when processing filenames containing MS-DOS device names such as CON, NUL, COM1, LPT1, and others. Remote attackers can cause the server to crash or become unresponsive by requesting files with these reserved device names.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →