4D WebStar < 5.3.3 FTP Pre-Authentication Overflow

Binary data 2170.prm...

4D WebSTAR Symlink Privilege Escalation

The remote server is running 4D WebStar FTP Server. The version of 4D WebStar FTP Server on the remote host is reportedly affected by a local symbolic link vulnerability caused by the application opening files without properly verifying their existence or their absolute location. Successful...

4D WebStar Arbitrary Multiple Vulnerabilities

The remote server is running a version of 4D WebStar Web Server earlier than 5.3.3. Such versions are reportedly affected by multiple issues : - An attacker may be able to obtain the listing of a directory by appending a star to the directory name. - An attacker may obtain the file php.ini by...

4D WebStar Pre-authentication FTP Overflow

There is a buffer overflow condition in the remote version of 4D WebStar FTP Server installed on the remote host. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of the FTP server root. C Tenable Network Security, Inc. include"compat.inc";...

CVE-2004-0697

Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information...

CVE-2004-0695

Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command...

CVE-2004-0696

The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "" asterisk character...

CVE-2004-0698

4D WebSTAR (FTP/Server) is affected: versions up to 5.3.2 and earlier contain a local symbolic link vulnerability caused by opening files without properly verifying their existence or absolute location. This design issue can let a local attacker write to arbitrary files with the application’s per...

CVE-2004-0697

CVE-2004-0697 affects 4D WebSTAR 5.3.2 and earlier. The vulnerability permits remote attackers to read the php.ini configuration file, potentially exposing sensitive information. The NVD entry lists a base CVSS v2 score of 5.0 (Medium) with network access and low complexity, but no exploitation d...

CVE-2004-0695

CVE-2004-0695 affects 4D WebSTAR WebSTAR FTP Server up to 5.3.2. It is a stack-based buffer overflow in the FTP service that can allow remote code execution via a long FTP command, with specific modules describing a USER/overflow in the logging routine (OSX 5.3.2). Exploitation references include...

CVE-2004-0696

CVE-2004-0696 affects 4D WebSTAR Web Server 5.3.2 and earlier. The ShellExample.cgi script allows remote attackers to list arbitrary directories via a URL containing the desired path and a * (asterisk). NVD lists a base score of 5.0 (Medium) with network access and low attack complexity; no explo...

CVE-2004-0697

Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information...

CVE-2004-0696: Undefined Security Weakness

The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "" asterisk character...

CVE-2004-0697: Undefined Security Weakness

Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information...

CVE-2004-0698: Undefined Security Weakness

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack...

CVE-2004-0695: Undefined Security Weakness

Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command...

4D Webstar multiple bugs

Buffer overflow, information leakage, symbolic links...

[Full-Disclosure] 4D WebSTAR FTP Buffer Overflow.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Vulnerability in 4D WebSTAR Server Suite. ================================================ Date: 11.09.2003 Author: B-r00t. 2003. Email: B-r00t [email protected] Vendor: 4D. Reference: http://www.4d.com/products/webstar.html Versions: 4D...

4D Webstar buffer overflow

Buffer overflow on oversized FTP password...

4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit

Exploit for macOS platform in category remote exploits ========================================================== 4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit ========================================================== / Remote Vulnerability in 4D WebSTAR Server Suite - Exploit...