CVE-2006-6565

Name: CVE-2006-6565
Creator: NVD / NIST
Published: 2006-12-15T11:28:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 70.30%

Last modified Jun 16, 2026

CVE-2006-6565 is a vulnerability of currently unknown severity. FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a different set of vectors than CVE-2006-6564. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command.. EPSS estimates a 70.30% chance of exploitation in the next 30 days.

Description

FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a different set of vectors than CVE-2006-6564. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command.

Metrics

EPSS Probability

70.30%

99.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-476

Affected Software

Vendor	Product	Versions
Filezilla-Project	Filezilla Server	< 0.9.22

References

http://sourceforge.net/project/shownotes.php?release_id=470364&group_id=21558Product, Third Party Advisory
http://www.vupen.com/english/advisories/2006/4937Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30853Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/2914Exploit, Third Party Advisory, VDB Entry
http://sourceforge.net/project/shownotes.php?release_id=470364&group_id=21558Product, Third Party Advisory
http://www.vupen.com/english/advisories/2006/4937Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30853Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/2914Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Dec 15, 2006
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2006-6565?

How severe is CVE-2006-6565?

Severity scoring for CVE-2006-6565 is pending analysis. The EPSS model estimates a 70.30% probability of exploitation in the next 30 days.

How do I fix CVE-2006-6565?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-6565?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST