Home FTP Server 1.10.1.139 - SITE INDEX Remote Denial of Service

Home FTP Server 1.10.1.139 - SITE INDEX Remote Denial of Service Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP...

Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote DOS

Exploit for unknown platform in category dos / poc ======================================================================== Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service ======================================================================== Title: Home FTP Server...

Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access

The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host reportedly allows an unauthenticated attacker to retrieve arbitrary sound files, such as voicemail messages, and to determine the existenc...

Improper access control

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

CVE-2006-2021

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

Path traversal

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

CVE-2006-2020

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

CVE-2006-2020

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

CVE-2006-2020

Affected product: Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8. Component/issue: Recordings/includes/main.conf stored under the web document root with insufficient access control. Impact (as stated): Remote attackers can obtain password information from the configuration file, v...

CVE-2006-2020: Undefined Security Weakness

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

[Full-disclosure] [SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI

ID : 2006.1 Product : ARI Asterisk Recording Interface http://www.littlejohnconsulting.com/?q=node/11 Asterisk@home Distribution http://asteriskathome.sourceforge.net/ Affected product : = 0.7.15 Asterisk@Home 2.6 and lower Class : Access to protected information, directory traversal Remote : yes...

CVE-2006-0356

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...

Command injection

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...

CVE-2006-0356

The CVE-2006-0356 entry applies to Ari Pikivirta Home Ftp Server 1.0.7. The vulnerability is a remote denial of service caused by a crafted combination of long USER and long PASS commands, which can impact availability (noted as partial availability in the CVSS). The available documents confirm t...

CVE-2006-0356

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...

CVE-2006-0356: Undefined Security Weakness

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...