CVE-2006-2173: Filezilla Server

Medium severity, CVSS 6.4. EPSS: 6.5% chance of exploitation in the next 30 days.

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.

Affected products

• Filezilla Filezilla Server: any version

Published 2006-05-04. Last modified 2026-06-16.