CVE-2004-1641: Undefined Security Weakness

Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service crash via a long FTP command such as 1 CWD, 2 STAT, or 3 LIST...

CVE-2004-1679: Undefined Security Weakness

Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ triple dot in the 1 CWD, 2 STOR, or 3 RETR commands...

CVE-2005-0312: Undefined Security Weakness

WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service access violation via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability...

WarFTPd < 1.82.00-RC9 CWD Command Remote Overflow

Binary data 2564.prm...

Titan FTP < 3.30 CWD Remote Heap Overflow

Binary data 2190.prm...

WS_FTP Server CWD Command Remote DoS

According to its banner, the version of WSFTP running on the remote host has a denial of service vulnerability. Sending a 'CWD' command followed by a long argument causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14586; scriptversion"1.16";...

ProFTPD cwd Command Format String

Binary data 1818.prm...

Serv-U < 2.5e CWD Command Path Disclosure

Binary data 1837.prm...

War FTP Daemon CWD/MKD Overflow DoS

Binary data 1849.prm...

mollensoftLightweight.txt

Mollensoft Lightweight FTP Server CWD Buffer Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5RP0L15CUM.html SUMMARY STORM has discovered a security vulnerability in Mollensoft Lightweight FTP Server...

Mollensoft Lightweight FTP Server buffer overflow

CWD command buffer overflow...

[NT] Mollensoft Lightweight FTP Server CWD Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2003-1299

Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." triple dot manipulations to the CWD command...

cesarDoS.txt

Description : FTP server CesarFTP v0.99g has a security hole in the command CWD. This command allow somebody to rise up the CPU usage with the following command : USER user PASS pass CWD ..................per 10000.... The CPU utilisation will be equal to 100%, the connection will not responding...

CesarFTP 0.99 g - Remote CWD Denial of Service

source: https://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging, effectively denying service to other...

WarFTPd CWD/MKD Command Overflow

The version of the War FTP Daemon running on this host is vulnerable to a buffer overflow attack. This is due to improper bounds checking within the code that handles both the CWD and MKD commands. By exploiting this vulnerability, it is possible to crash the server. This script was written by Er...

Shambala FTP Server does not adequately validate user input thereby allowing directory traversal

Overview Shambala FTP server has a directory traversal vulnerability in its handling of the CWD command. Description Shambala FTP server contains a directory traversal vulnerability in its handling of the CWD command. Attackers may exploit this vulnerability to read directories and files outside ...

CVE-2001-1193

The CVE-2001-1193 issue affects EFTP, specifically version 2.0.8.346, where the CWD (change working directory) command does not properly validate input, allowing authenticated local users to perform a directory traversal and read arbitrary directories/files on the server. This is a confirmed vuln...

CVE-2001-1193

Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... modified dot dot in the CWD command...

CVE-2001-1193: Undefined Security Weakness

Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... modified dot dot in the CWD command...