CVE catalog

CVE-2006-2403

filezilla: CVE-2006-2403

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
2.43% · Oct 25, 2026

Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfilezillasid3.71.0-1not affected
Debianfilezillaforky3.71.0-1not affected
Debianfilezillatrixie3.68.1-1not affected
Debianfilezillabookworm3.63.0-1+deb12u3not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianfilezillasourcesidNot affectedunimportantNot reportedNot reported
DebianfilezillasourceforkyNot affectedunimportantNot reportedNot reported
DebianfilezillasourcetrixieNot affectedunimportantNot reportedNot reported
DebianfilezillasourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [filezilla]Not affected
    Details (2)
    • 3.63.0-1+deb12u3 · amd64 · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

    • 3.63.0-1+deb12u3 · arm64 · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

  • [filezilla-common]Not affected

    Source package: [filezilla]

    Details (2)
    • 3.63.0-1+deb12u3 · all · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

    • 3.63.0-1+deb12u3 · all · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

Observed:

References