Lucene search
+L

2681 matches found

Cvelist
Cvelist
added 2001/05/07 4:00 a.m.27 views

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

6.7AI score0.12049EPSS
SaveExploits2References5
securityvulns
securityvulns
added 2001/02/26 12:00 a.m.53 views

DoS против Serv-U ftp

Большое число нулевых байтов в строке приводит к краху сервера...

0.1AI score
SaveExploits0References2Affected Software1
securityvulns
securityvulns
added 2001/02/26 12:00 a.m.48 views

Serv-U 2.5i DoS

Hi, I think I found another DoS issue in Serv-U 2.5i: I've downloaded the "Fixed" version of Serv-U yesterday. I installed it on one of my pc's and started windirRSRCMTR.EXE to see how many resources are used when I flood it. Then I started to play around with the server: Ftp open server Connecte...

SaveExploits0
NVD
NVD
added 2001/02/16 5:00 a.m.15 views

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

5CVSS6.7AI score0.12049EPSS
SaveExploits2References5
CVE
CVE
added 2001/01/22 5:00 a.m.48 views

CVE-2000-0837

CVE-2000-0837 affects FTP Serv-U 2.5e, where a remote attacker can cause a denial of service by sending a large number of null bytes to the FTP service. The underlying issue is the service crashing under大量 null-byte input (as documented in public advisories and the Nessus plugin for Serv-U 2.5e D...

5CVSS6.7AI score0.02603EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2001/01/22 5:00 a.m.29 views

CVE-2000-0837

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...

6.6AI score0.02603EPSS
SaveExploits1References3
NVD
NVD
added 2000/12/11 5:00 a.m.24 views

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

7.5CVSS6.7AI score0.07558EPSS
SaveExploits2References3
securityvulns
securityvulns
added 2000/12/06 12:00 a.m.20 views

Дырка в Serv-U (directory traversal)

С помощью команды cd ..20. можно подняться в директорию более высокого уровня...

1.8AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2000/12/06 12:00 a.m.33 views

Serv-U CD Command Encoded Traversal Arbitrary File/Directory Access

The remote host is running Serv-U FTP server. The installed version fails to properly sanitize user-supplied input to the 'cd' command. An attacker could exploit this flaw to access arbitrary files on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

5CVSS5.8AI score0.12049EPSS
SaveExploits2References2
securityvulns
securityvulns
added 2000/12/06 12:00 a.m.102 views

Serv-U FTP directory traversal vunerability (all versions)

===================================================================== Securax-SA-09 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Catsoft serv-U FTP Directory Transversal Vulnerability Announced: 2000-12-03 Updated...

7.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2000/12/05 12:00 a.m.31 views

Securax-SA-09.serv-u

===================================================================== Securax-SA-09 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Catsoft serv-U FTP Directory Transversal Vulnerability Announced: 2000-12-03 Updated...

7.4AI score
SaveExploits0
CVE
CVE
added 2000/11/29 5:00 a.m.54 views

CVE-2000-1033

CVE-2000-1033 affects Serv-U FTP Server. An attacker can bypass the anti-hammering feature by first logging in as a valid user (possibly anonymous) and then attempting to guess the passwords of other users, enabling unauthorized access attempts. The CVSS details indicate network access, no authen...

7.5CVSS7.1AI score0.07558EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2000/11/29 5:00 a.m.29 views

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

6.7AI score0.07558EPSS
SaveExploits2References3
NVD
NVD
added 2000/11/14 5:00 a.m.18 views

CVE-2000-0837

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...

5CVSS6.6AI score0.02603EPSS
SaveExploits1References3
securityvulns
securityvulns
added 2000/10/30 12:00 a.m.39 views

Атака "грубой силы" против Serv-U (bruteforcing)

Можно обойти защитный механизм, ограничивающий число попыткок, перемежая ввод имени и пароля с аннонимным логином...

0.7AI score
SaveExploits0References1
securityvulns
securityvulns
added 2000/08/07 12:00 a.m.38 views

FTP Serv-U 2.5e vulnerability.

================================================================= Blue Panda Vulnerability Announcement: FTP Serv-U 2.5e 04/08/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: Sending FTP Serv-U a string...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2000/08/04 12:00 a.m.34 views

servu25e.txt

================================================================= Blue Panda Vulnerability Announcement: FTP Serv-U 2.5e 04/08/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: Sending FTP Serv-U a string...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2000/08/04 12:00 a.m.44 views

Serv-U 2.5e Null Byte Saturation DoS

It is possible to crash the remote FTP service by sending it a large number of null bytes. An attacker could exploit this flaw to deny access to the FTP server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10488; scriptversion"1.35"; scriptcvsdate"Date: 2018/11/15...

5CVSS5.6AI score0.02603EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2000/06/02 4:00 a.m.26 views

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

6.8AI score0.02458EPSS
SaveExploits1References1
CVE
CVE
added 2000/06/02 4:00 a.m.67 views

CVE-1999-0838

Concrete details from connected documents show that Serv-U FTP before version 2.5e is affected by multiple issues: a buffer overflow in the SERVER when processing the SITE command can cause a denial of service, and a path disclosure via CWD commands for nonexistent directories can reveal the root...

5CVSS6.8AI score0.02458EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder