CVE-2006-2225

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...

Buffer overflow

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...

CVE-2006-2225

CVE-2006-2225 affects XM Easy Personal FTP Server 4.3 and earlier. It describes a buffer overflow exploitable by a long USER command that allows remote code execution; multiple sources corroborate this vector (USER command) and impact. There is no explicit remediation or patch details in the prov...

CVE-2006-2225

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...

CVE-2006-2226

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...

CVE-2006-2226

The connected records indicate a related vulnerability: CVE-2006-6750 describes a format string vulnerability in XM Easy Personal FTP Server 5.0.1 that allows remote attackers to cause a denial of service (application crash) via format string specifiers in a long PORT command. This issue is noted...

[REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability

REWTERZ-20060503 - XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability Release Date: May 3, 2006 Severity: High Remote Code Execution Vendor: Dxmsoft Software Affected: XM Easy Personal FTP Server v4.3 and before Operating Systems Affected: Windows NT 4.0 Windows 98 / ME Windows 2000...

XM Easy Personal FTP Server 4.3 - USER Remote Buffer Overflow (PoC)

XM Easy Personal FTP Server 4.3 - USER Remote Buffer Overflow PoC XM EASY PERSONAL FTP SERVER v4.3 http://www.securityfocus.com/archive/1/432960/30/0/threaded Buffer Overflow Vulnerability PoC [email protected] import socket import struct import time import sys buff='USER '+'A'5000+'\r\n' if...

XM Easy Personal FTP Server <= 4.3 (USER) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== XM Easy Personal FTP Server \n" %sys.argv0 sys.exit0 try: print "+ Connecting to %s" %sys.argv1 s=socket.socketsocket.AFINET, socket.SOCKSTREAM...

XM Easy Personal FTP Server 4.3 - 'USER' Remote Buffer Overflow (PoC)

XM EASY PERSONAL FTP SERVER v4.3 http://www.securityfocus.com/archive/1/432960/30/0/threaded Buffer Overflow Vulnerability PoC [email protected] import socket import struct import time import sys buff='USER '+'A'5000+'\r\n' if lensys.argv!=3: print "+ Usage: %s \n" %sys.argv0 sys.exit0 try: print...

Buffer overflow

Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when...

Code injection

The a Quick 'n Easy Web Server before 3.1.1 and b Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via 1 . dot and 2 space characters in the extension of a URL...

Secunia Research: Quick &#39;n Easy/Baby Web Server ASP Code Disclosure Vulnerability

====================================================================== Secunia Research 24/03/2006 - Quick 'n Easy/Baby Web Server ASP Code Disclosure Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2006-1391

The CVE-2006-1391 entry concerns two web servers: Quick 'n Easy Web Server (before 3.1.1) and Baby ASP Web Server (2.7.2). The issue is that an attacker can remotely obtain the source code of ASP files by crafting URLs where the extension uses a dot/space (e.g., manipulating the URL extension), e...

CVE-2006-1391

The a Quick 'n Easy Web Server before 3.1.1 and b Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via 1 . dot and 2 space characters in the extension of a URL...

[SA19306] Quick &#39;n Easy Web Server ASP Code Disclosure Vulnerability

TITLE: Quick 'n Easy Web Server ASP Code Disclosure Vulnerability SECUNIA ADVISORY ID: SA19306 VERIFY ADVISORY: http://secunia.com/advisories/19306/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Quick and Easy Web Server 3.x...

CVE-2003-1297

CVE-2003-1297 affects Easy File Sharing (EFS) Web Server 1.2. The web server stores the option.ini (options.ini) file and the log directory under the web root with insufficient access control, enabling remote attackers to read sensitive data. The disclosed data can include an SMTP account usernam...

Cross site scripting

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2006-1159

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

Path traversal

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...