Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2005-3589

66
FAUCET Score

CVE-2005-3589 describes a buffer overflow vulnerability in FileZilla Server Terminal version 0.9.4d. This flaw allows unauthenticated remote attackers to trigger a denial of service by sending an excessively long USER FTP command, causing the terminal to crash. With a CVSS score of 7.8 (high), this vulnerability is easily exploitable over the network with low attack complexity, leading to complete availability impact. While not observed in active exploitation, proof-of-concept code and a Metasploit module are publicly available, though community discussion and media coverage remain minimal.

Impacted Technologies

VendorProductVersion(s)CPE
0.9.4dCPE matchmatch criteria
cpe:2.3:a:filezilla:filezilla_server_terminal:0.9.4d:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.8HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
52.86%
Probability of exploitation in next 30 days
EPSS Percentile
98.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Metasploit: FileZilla FTP Server Admin Interface Denial of Service · Nov 7, 2005
ExploitDB: EDB-1336 · Nov 21, 2005
This CVE's current EPSS score of 0.5286 is in the 98th percentile among its peer group of 51,466 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

ingehenriksen.blogspot.com / 2005/11/filezilla-server-terminal-094d-dos-poc_21.html
ingehenriksen.blogspot.com / 2005/11/work-in-progress-filezilla-server.html
marc.info
sourceforge.net / project/shownotes.php
Patch
osvdb.org / 20817
securityfocus.com / archive/1/417307/30/0/threaded
securityfocus.com / bid/15346