PYSEC-2010-22

pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...

Один тип уязвимостей Питон программ

Один тип уязвимостей Питон программ. Авторы: prusle и djp. Неустойчивость к ошибкам библиотечных функций языка Си таких как stscpy, sprintf, strcat и многих других позволяет получать полный контроль над ОС, написанными на Си. Изобретательность хакеров проявилась в изобретении методов эксплуатации...

CVE-2010-2425

CVE-2010-2425 affects South River Technologies Titan FTP Server 8.10.1125 and earlier, with a directory traversal flaw in COMB command due to improper handling of ..// sequences that allows remote authenticated users to read or delete arbitrary files. OpenVAS entries classify Titan FTP Server

Home FTP Server 1.10.2.143 - Directory Traversal

source: https://www.securityfocus.com/bid/40419/info Home FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to download, upload, and delete arbitrary files outside of the FTP server...

Golden FTP Server 4.30 File Deletion Vulnerability

Exploit for unknown platform in category remote exploits ================================================== Golden FTP Server 4.30 File Deletion Vulnerability ================================================== Title: Golden FTP Server 4.30 File Deletion Vulnerability CVE-ID: OSVDB-ID: Author:...

CVE-2009-3095

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

FreeBSD-SA-09:01.lukemftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:01.lukemftpd Security Advisory The FreeBSD Project Topic: Cross-site request forgery in lukemftpd8 Category: core Module: lukemftpd Announced: 2009-01-07...

Femitter FTP Server 1.03 - RETR Remote Denial of Service (PoC)

Femitter FTP Server 1.03 - RETR Remote Denial of Service PoC /0-----------------------------------------------------------------------------------0\ 0 0 | | | Femitter FTP Server 1.03 RETR Remote Denial of Service Exploit PoC | | | | Summary: Femitter Server is an easy-to use HTTP and FTP server...

WzdFTPD FTP server DoS

NULL pointer dereference on FTP commands parsing...

ftpd-ldpreload.pl.txt

FTP server GNU inetutils 1.4.2 Remote Root Exploit This program remotely exploits the most recent versions of GNU inetutils ftpd on linux systems. Requirements: 1. There MUST be a chroot'ed environment for the logged in user 2. Directory etc must be writeable by the logged in user duh! The exploi...

Sambar FTP Server远程拒绝服务漏洞

Sambar FTP Server是一款Windows系统下的FTP服务程序。 Sambar FTP Server对SIZE命令参数数据缺少充分边界检查，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交包含超长字符串的SIZE命令，可导致Sambar FTP Server崩溃，精心构建提交数据可能以应用程序进程权限执行任意指令。 Sambar Server 6.4 目前没有解决方案提供： http://www.sambar.com/ ?php Sambar FTP Server 6.4 SIZE Denial Of Service by rgod mail: retrog at...

XM Easy Personal FTP Server <= 4.3 (USER) Remote Buffer Overflow PoC

No description provided by source. XM EASY PERSONAL FTP SERVER v4.3 http://www.securityfocus.com/archive/1/432960/30/0/threaded Buffer Overflow Vulnerability PoC [email protected] import socket import struct import time import sys buff='USER '+'A'5000+'\r\n' if lensys.argv!=3: print "+ Usage: %s ...

The use of the FTP server's vulnerability to find broiler-vulnerability warning-the black bar safety net

Scanning and determine the target As the saying goes,haste makes waste,in the shortest time period crack shot to get a large number of broilers. You must first determine the presence of the FTP service host,this is achieved by the Scan to complete FTPSCAN is a command line FTP weak passwords...

GLSA-200511-11 : linux-ftpd-ssl: Remote buffer overflow

The remote host is affected by the vulnerability described in GLSA-200511-11 linux-ftpd-ssl: Remote buffer overflow A buffer overflow vulnerability has been found in the linux-ftpd-ssl package. A command that generates an excessively long response from the server may overrun a stack buffer. Impac...

Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

Golden FTP Server < 1.93 USER Remote Overflow

Binary data 2667.prm...

3CServer 1.1 (FTP Server) - Remote Overflow

3CServer 1.1 FTP Server - Remote Overflow / subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore,...

RhinoSoft Serv-U FTP Server < 5.2 - Remote Denial of Service

/ denial of service in Serv-u up to 5.2 [email protected] - www.milw0rm.com Advisory: http://www.securitytracker.com/alerts/2004/Sep/1011219.html Ya its useless. / include include include include include include include define SERVERPORT 21 usagechar name printf"usage: %s -h hostname/ip -u user ...

FTP Server 'glob' Function Overflow

Binary data 1836.prm...

W32.Dabber Worm Detection

The W32.Dabber worm is listening on this port. W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, it tries to listen on ports 9899...