← Vulnerability feed

Vulnerability record · CVE-2009-0884 · published 12 March 2009

CVE-2009-0884: Filezilla-project filezilla server classic buffer overflow vulnerability

Filezilla Project · Filezilla Server

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets.

4.3 CVSS 2.0 Medium EPSS 3.4% · top 11.5% CWE-120 · Classic buffer overflow
4.3CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://filezilla-project.org/index.php Release NotesVendor Advisory
http://secunia.com/advisories/34089 Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=665428 Broken Link
http://www.securityfocus.com/bid/34006 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1021812 Third Party AdvisoryVDB EntryVendor Advisory
http://www.vupen.com/english/advisories/2009/0603 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49107 Third Party AdvisoryVDB Entry
http://filezilla-project.org/index.php Release NotesVendor Advisory
http://secunia.com/advisories/34089 Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=665428 Broken Link
http://www.securityfocus.com/bid/34006 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1021812 Third Party AdvisoryVDB EntryVendor Advisory
http://www.vupen.com/english/advisories/2009/0603 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49107 Third Party AdvisoryVDB Entry

Track CVE-2009-0884 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2014-0160OpenSSL TLS/DTLS Heartbeat Extension Out-of-Bounds Read (Heartbleed)OpenSSL 1.0.1 before 1.0.1g mishandles Heartbeat Extension packets in its TLS and DTLS implementations, causing an out-of-bounds read of process memo…KEVEPSS 100%analysed7.4CVE-2014-0224OpenSSL ChangeCipherSpec handling flaw enables MITM session hijackOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages. A man-in-the…EPSS 95%analysed5.0CVE-2005-0850Filezilla-project filezilla server improper input validation vulnerabilityFileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name …EPSS 2.2%5.0CVE-2005-0851Filezilla-project filezilla server vulnerabilityFileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via cer…EPSS 2.2%4.3CVE-2015-10003Filezilla-project filezilla server vulnerabilityA vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT …EPSS 0.54%4.0CVE-2006-6565FileZilla Server LIST/NLST wildcard NULL pointer dereference DoSFileZilla Server before 0.9.22 crashes on a wildcard argument passed to the LIST or NLST FTP commands, caused by a NULL pointer dereference. The reco…EPSS 71%analysed5.5CVE-2025-43520Apple OS kernel memory corruption via malicious appA memory corruption flaw (classic buffer overflow) in Apple's kernel was fixed across iOS, iPadOS, macOS, tvOS, visionOS and watchOS. A malicious app…KEVEPSS 0.43%analysed8.8CVE-2025-31277Apple WebKit memory corruption via malicious web contentApple WebKit fails to handle memory correctly when processing crafted web content, leading to memory corruption across Safari, iOS, iPadOS, macOS, tv…KEVEPSS 1.6%analysed

Source: NIST National Vulnerability Database (record CVE-2009-0884), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.