CVE-2015-10003

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://www.securitygalore.com/site3/filezilla_ftp_server_advisory	Patch Technical Description Third Party Advisory
https://vuldb.com/?id.97203	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-07-17 07:15

Updated : 2024-02-28 19:29

NVD link : CVE-2015-10003

Mitre link : CVE-2015-10003

CVE.ORG link : CVE-2015-10003

JSON object : View

Products Affected

filezilla-project

filezilla_server

CWE

CWE-610

Externally Controlled Reference to a Resource in Another Sphere

CWE-441

Unintended Proxy or Intermediary ('Confused Deputy')

{"id": "CVE-2015-10003", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2022-07-17T07:15:07.363", "references": [{"url": "http://www.securitygalore.com/site3/filezilla_ftp_server_advisory", "tags": ["Patch", "Technical Description", "Third Party Advisory"], "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/?id.97203", "tags": ["Third Party Advisory"], "source": "cna@vuldb.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-610"}]}, {"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-441"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad, clasificada como problem\u00e1tica, en FileZilla Server versiones hasta 0.9.50. Esto afecta a una parte desconocida del componente PORT Handler. La manipulaci\u00f3n conlleva a un intermediario no intencionado. Es posible iniciar el ataque de forma remota. La actualizaci\u00f3n a versi\u00f3n 0.9.51 puede abordar este problema. Es recomendado actualizar el componente afectado"}], "lastModified": "2022-07-25T18:48:44.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B69E828B-FE36-4132-A6EB-E10544A316F3", "versionEndExcluding": "0.9.51"}], "operator": "OR"}]}], "sourceIdentifier": "cna@vuldb.com"}