← Vulnerability feed

Vulnerability record · CVE-2005-0850 · published 2 May 2005

CVE-2005-0850: Filezilla-project filezilla server improper input validation vulnerability

Filezilla Project · Filezilla Server

FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others.

5.0 CVSS 2.0 Medium EPSS 2.2% · top 18.3% CWE-20 · Improper input validation
5.0CVSS 2.0 base score
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473 ProductThird Party Advisory
http://www.securityfocus.com/bid/12865 PatchThird Party AdvisoryVDB Entry
http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473 ProductThird Party Advisory
http://www.securityfocus.com/bid/12865 PatchThird Party AdvisoryVDB Entry

Track CVE-2005-0850 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2014-0160OpenSSL TLS/DTLS Heartbeat Extension Out-of-Bounds Read (Heartbleed)OpenSSL 1.0.1 before 1.0.1g mishandles Heartbeat Extension packets in its TLS and DTLS implementations, causing an out-of-bounds read of process memo…KEVEPSS 100%analysed7.4CVE-2014-0224OpenSSL ChangeCipherSpec handling flaw enables MITM session hijackOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages. A man-in-the…EPSS 95%analysed5.0CVE-2005-0851Filezilla-project filezilla server vulnerabilityFileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via cer…EPSS 2.2%4.3CVE-2015-10003Filezilla-project filezilla server vulnerabilityA vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT …EPSS 0.54%4.3CVE-2009-0884Filezilla-project filezilla server classic buffer overflow vulnerabilityBuffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS pac…EPSS 3.4%4.0CVE-2006-6565FileZilla Server LIST/NLST wildcard NULL pointer dereference DoSFileZilla Server before 0.9.22 crashes on a wildcard argument passed to the LIST or NLST FTP commands, caused by a NULL pointer dereference. The reco…EPSS 71%analysed9.5CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEV9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2005-0850), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.