← Vulnerability feed

Vulnerability record · CVE-2005-0851 · published 2 May 2005

CVE-2005-0851: Filezilla-project filezilla server vulnerability

Filezilla Project · Filezilla Server

FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings.

5.0 CVSS 2.0 Medium EPSS 2.2% · top 18.3% CWE-835 · CWE-835
5.0CVSS 2.0 base score
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473 ProductThird Party Advisory
http://www.securityfocus.com/bid/12865 PatchThird Party AdvisoryVDB Entry
http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473 ProductThird Party Advisory
http://www.securityfocus.com/bid/12865 PatchThird Party AdvisoryVDB Entry

Track CVE-2005-0851 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2014-0160OpenSSL TLS/DTLS Heartbeat Extension Out-of-Bounds Read (Heartbleed)OpenSSL 1.0.1 before 1.0.1g mishandles Heartbeat Extension packets in its TLS and DTLS implementations, causing an out-of-bounds read of process memo…KEVEPSS 100%analysed7.4CVE-2014-0224OpenSSL ChangeCipherSpec handling flaw enables MITM session hijackOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages. A man-in-the…EPSS 95%analysed5.0CVE-2005-0850Filezilla-project filezilla server improper input validation vulnerabilityFileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name …EPSS 2.2%4.3CVE-2015-10003Filezilla-project filezilla server vulnerabilityA vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT …EPSS 0.54%4.3CVE-2009-0884Filezilla-project filezilla server classic buffer overflow vulnerabilityBuffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS pac…EPSS 3.4%4.0CVE-2006-6565FileZilla Server LIST/NLST wildcard NULL pointer dereference DoSFileZilla Server before 0.9.22 crashes on a wildcard argument passed to the LIST or NLST FTP commands, caused by a NULL pointer dereference. The reco…EPSS 71%analysed8.6CVE-2024-20353Cisco ASA and FTD web server HTTP header parsing DoSCisco ASA and FTD management and VPN web servers fail to fully check errors when parsing an HTTP header, so a crafted request can crash and reload th…KEVEPSS 71%analysed

Source: NIST National Vulnerability Database (record CVE-2005-0851), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.