FileZilla Server Null Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	21542
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 11 2006 12:00AM
Updated:	Dec 11 2006 12:00AM
Credit:	rgod is credited with the discovery of this vulnerability.
Vulnerable:	FileZilla FileZilla Server 0.9.21 FileZilla FileZilla Server 0.9.19 FileZilla FileZilla Server 0.9.17 FileZilla FileZilla Server 0.9.16 b FileZilla FileZilla Server 0.9.9 FileZilla FileZilla Server 0.9.8 c FileZilla FileZilla Server 0.9.8 b FileZilla FileZilla Server 0.9.8 a FileZilla FileZilla Server 0.9.8 FileZilla FileZilla Server 0.7.1 FileZilla FileZilla Server 0.7 FileZilla FileZilla Server 0.9.6 FileZilla FileZilla Server 0.9.5 FileZilla FileZilla Server 0.9.4e FileZilla FileZilla Server 0.9.4d FileZilla FileZilla Server 0.9.3 FileZilla FileZilla Server 0.9.20 FileZilla FileZilla Server 0.9.2 FileZilla FileZilla Server 0.9.1b FileZilla FileZilla Server 0.9.0 FileZilla FileZilla Server 0.8.9 FileZilla FileZilla Server 0.8.8 FileZilla FileZilla Server 0.8.7 FileZilla FileZilla Server 0.8.6a FileZilla FileZilla Server 0.8.5 FileZilla FileZilla Server 0.8.4 FileZilla FileZilla Server 0.8.3 FileZilla FileZilla Server 0.8.2 FileZilla FileZilla Server 0.8.1
Not Vulnerable:	FileZilla FileZilla Server 0.9.22

FileZilla Server Null Pointer Dereference Denial of Service Vulnerability

An attacker can use standard network utilities to exploit this issue.

FileZilla Server Null Pointer Dereference Denial of Service Vulnerability

Solution:
The vendor has released an update to address this issue. Please see the references for more information.

FileZilla Server Null Pointer Dereference Denial of Service Vulnerability

References:

• FileZilla Server Change Log 0.9.22 (FileZilla )
  
• Vendor Home Page (FileZilla)