304 matches found
CVE-2000-1035: Undefined Security Weakness
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command...
CVE-1999-0671
CVE-1999-0671 : The Red Hat security entry and other connected records confirm a buffer overflow in the ToxSoft NextFTP client triggered by the CWD command . The core issue is a vulnerability in processing the CWD command that can overflow a buffer, with public references noting this exact descri...
CVE-1999-0671
Buffer overflow in ToxSoft NextFTP client through CWD command...
CVE-1999-0671: Undefined Security Weakness
Buffer overflow in ToxSoft NextFTP client through CWD command...
warftpd exploit?
WarFTPd 1.66 - 1.67 can be crashed due to an un-checked buffer for the CWD command, as this DoS exploit by eth0 from b0f shows. Now, it seems that the ret address can't be overwritten so it is probably a dynamic buffer, and therefore a heap or data overflow... I've seen some heap overflows agains...
CVE-1999-0950: Undefined Security Weakness
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories...
CVE-2000-0131
CVE-2000-0131: War FTP Daemon 1.6x is vulnerable to a buffer overflow in the CWD/MKD command handling due to improper bounds checking. This can enable a remote attacker to crash the server (DoS) via long MKD/CWD commands. Documented in several sources (OpenVAS/Nessus entries), with CVSSv2 base sc...
CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...
CVE-2000-0131: Undefined Security Weakness
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...
Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service
// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...
CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...
FTPd CWD Command Account Enumeration
It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...
WFTPD 2.34/2.40/3.0 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/747/info WFTPD is reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient bounds checking performed on MKD and CWD arguments. It is reported that superfluous data passed to MKD first and then to CWD results i...
CVE-1999-0362
The CVE is for WS_FTP Server DoS via the CWD command. Affected software is WS_FTP Server; vulnerability arises when a CWD command with a long argument crashes the service, leading to a denial of service (availability impact). Public references describe this as a remote DoS issue with the CWD hand...
CVE-1999-0082
CWD root command in ftpd allows root access...
CVE-1999-0362
WSFTP server remote denial of service through cwd command...
CVE-1999-0201: Undefined Security Weakness
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user...
CVE-1999-0219: Undefined Security Weakness
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service crash via a long 1 CWD or 2 LS list command...