VDB-97203 · CVE-2015-10003 · BID 74535

FileZilla Server har 0.9.50 PORT kura hakki ndiyam

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin FileZilla Server har 0.9.50. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, $software_file na cikin fayil, PORT Handler na cikin sashi. Ngam manipulation shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-441. Gaskiya, laifi an fitar da shi 07/07/2015 ta Amit Klein (Webseite). Advisory ɗin ana rabawa don saukewa a securitygalore.com. Wannan rauni ana sayar da shi da suna CVE-2015-10003. Ngam yiɗi ka a tuma ndiyam ka nder waya. Tekinikal bayani ba ga. Ba exploit ɗin da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. Vulnerability ɗin nan kuma an rubuta shi a wasu kundin bayanan vulnerability: SecurityFocus (BID 74535). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

4 Goyarwa · 50 Datenpunkte

FurɗeSúgá
02/22/2017 13:25
Gargadi 1/3
08/16/2020 14:24
Gargadi 2/3
07/16/2022 09:41
Gargadi 3/3
07/16/2022 09:43
software_nameFileZilla ServerFileZilla ServerServerServer
software_version<=0.9.50<=0.9.50<=0.9.50<=0.9.50
vulnerability_risk1111
vulnerability_historic0000
cvss2_vuldb_basescore3.53.53.53.5
cvss2_vuldb_tempscore3.03.03.03.0
cvss2_vuldb_avNNNN
cvss2_vuldb_ciPPPP
cvss2_vuldb_iiNNNN
cvss2_vuldb_aiNNNN
cvss3_meta_basescore4.34.34.34.3
cvss3_meta_tempscore4.14.14.14.1
cvss3_vuldb_basescore4.34.34.34.3
cvss3_vuldb_tempscore4.14.14.14.1
cvss3_vuldb_avNNNN
cvss3_vuldb_uiNNNN
cvss3_vuldb_sUUUU
cvss3_vuldb_cLLLL
cvss3_vuldb_iNNNN
cvss3_vuldb_aNNNN
advisory_date1436227200 (07/07/2015)1436227200 (07/07/2015)1436227200 (07/07/2015)1436227200 (07/07/2015)
advisory_urlhttp://www.securitygalore.com/site3/filezilla_ftp_server_advisoryhttp://www.securitygalore.com/site3/filezilla_ftp_server_advisoryhttp://www.securitygalore.com/site3/filezilla_ftp_server_advisoryhttp://www.securitygalore.com/site3/filezilla_ftp_server_advisory
person_nameAmit KleinAmit KleinAmit KleinAmit Klein
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
countermeasure_nameGargajiyaGargajiyaGargajiyaGargajiya
upgrade_version0.9.510.9.510.9.510.9.51
advisory_locationWebsiteWebsiteWebsiteWebsite
cvss2_vuldb_eNDNDNDND
cvss2_vuldb_rlOFOFOFOF
cvss2_vuldb_rcCCCC
cvss3_vuldb_eXXXX
cvss3_vuldb_rlOOOO
cvss3_vuldb_rcCCCC
cvss2_vuldb_acMMMM
cvss2_vuldb_auSSSS
cvss3_vuldb_acLLLL
cvss3_vuldb_prLLLL
software_typeFile Transfer SoftwareFile Transfer SoftwareFile Transfer Software
source_securityfocus745357453574535
source_securityfocus_date1430956800 (05/07/2015)1430956800 (05/07/2015)1430956800 (05/07/2015)
securityfocus_classDesign ErrorDesign ErrorDesign Error
securityfocus_titleFileZilla Server Remote Information Disclosure WeaknessFileZilla Server Remote Information Disclosure WeaknessFileZilla Server Remote Information Disclosure Weakness
vulnerability_cweCWE-200 (Bayani fitowa)CWE-441 (kura hakki ndiyam)CWE-441 (kura hakki ndiyam)
software_vendorFileZillaFileZilla
software_componentPORT HandlerPORT Handler
source_cveCVE-2015-10003
cna_responsibleVulDB

Do you need the next level of professionalism?

Upgrade your account now!