116 matches found
Sunftp build9(1) - ftp server Vulnerability
It is possible to break out of the root directory by using relative paths e:crap was used as homedir. of user test. the get command getting files from outside of the root dir. 220 chris FTP Server SunFTP b9 ready on port 21... Benutzer 10.17.3.44:none: test 331 Password required for test. Kennwor...
CVE-2000-1027
Cisco Secure PIX Firewall 5.22 allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established...
Cat Soft Serv-U FTP Server 2.4/2.5 - FTP Directory Traversal
source: https://www.securityfocus.com/bid/2052/info FTP Serv-U is an internet FTP server from CatSoft. Authenticated users can gain access to the ftproot of the drive where Serv-U FTP has been installed. Users that have read, write, execute and list access in the home directory will have the same...
Evolvable Shambala Server 4.5 - Denial of Service
Evolvable Shambala Server 4.5 - Denial of Service source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection...
Serv-U 2.5e Null Byte Saturation DoS
It is possible to crash the remote FTP service by sending it a large number of null bytes. An attacker could exploit this flaw to deny access to the FTP server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10488; scriptversion"1.35"; scriptcvsdate"Date: 2018/11/15...
WFTPD Unauthenticated MLST Command DoS
The FTP server running on the remote host is affected by a denial of service vulnerability when executing an MLST command. An unauthenticated, remote can exploit this to crash the server by using the 'MLST a' command just after making a connection. C Tenable Network Security, Inc...
CVE-2000-0574
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function sometimes called by setproctitle, which allows remote attackers to cause a denial of service or execute arbitrary commands...
Virtual Visions FTP ftp.pl dir Parameter Traversal Arbitrary File Access
The remote ftp server contains a CGI script that provides and HTML interface. This CGI script contains a vulnerability that an attacker can use to get the listing of the content of arbitrary directories. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Concerning the LDAP Enabled Netscape FTP Server
Over the last few days a great number of people have mailed us in regards to the "Netscape Professional Services FTP Server Vulnerability" http://www.securityfocus.com/bid/1375 discovered by Michal Zalewski [email protected] and posted to the Bugtraq mailing list on Wed, 21 Jun 2000. The following...
Etype Eserv 2.9.2 - Logging Buffer Overflow
source: https://www.securityfocus.com/bid/1315/info EType EServ is a combination mail, news, HTTP, FTP, and proxy server. The logging mechanism in EType EServ is vulnerable to a heap buffer overflow that could allow remote attackers to execute arbitrary code on the server. The overflow occurs whe...
WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion
WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under...
FTPd CWD Command Account Enumeration
It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...
qvt-term.4.2.dos.txt
Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server, the buffer overflow is caused by a long user name / password, 2000 characters, and the re-connection to the Ftp Server. There is not much to expa...
Multiple FTP Server QUOTE CWD Command Home Path Disclosure
It is possible to determine the full path of the home directory of the 'ftp' user by issuing the 'CWD' command. An attacker can exploit this to determine where to put a .rhost file using other security flaws. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10087;...
FTP Privileged Port Bounce Scan
It is possible to force the remote FTP server to connect to third parties using the PORT command. The problem allows intruders to use your network resources to scan other hosts, making them think the attack comes from your network. TRUSTED...