CVE-2006-6564

CVE-2006-6564 describes a denial-of-service vulnerability in FileZilla Server versions prior to 0.9.22. An authenticated remote attacker can crash the server by sending a malformed argument to the STOR command, leading to a NULL pointer dereference; some analysis suggests a malformed PORT command might also trigger this. This vulnerability has a CVSS score of 4.0, indicating a low severity, as it requires authentication (Au:S) and only results in a partial availability impact (A:P). While not listed on the KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.