Smallftpd 1.0.3 DoS

Application: Smallftpd http://smallftpd.free.fr/ Version: 1.0.3 Bug: Denial Of Service Author: intuit e-mail: [email protected] web: http://rootshells.tk/ greetz to: tgs ; 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description:...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be...

EnceladusServerSuite3.9.11.txt

Enceladus Server suite 3.9.11 Release Date: ------------- June 15,2003 Severity --------- HighRemote crash-code execution Systems Affected: ----------------- Enceladus Server Suite 3.9.11 possibly all the older versions are vulnerable Description: Enceladus Server Suite is a package that contains...

Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access

The remote FTP server is vulnerable to a flaw that allows users to access files outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : ftp quote stat ../ Some versions of VisNetic FTP Server and Titan FTP Server are known to be affected by this issue. C...

FTP Server root Directory .forward File Present

The remote anonymous FTP server has a .forward file set in its home. An attacker may use it to determine who is in charge of the FTP server and set up a social engineering attack. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11565; scriptversion "$Revision: 1.18 $";...

FTP Server root Directory .rhosts File Present

The remote anonymous FTP server has a .rhosts file set in its home directory. An attacker may use it to determine the trust relationships between this server and other hosts on the network. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11566; scriptversion"$Revision:...

Multiple FTP Server setproctitle Function Arbitrary Command Execution

The remote FTP server misuses the function setproctitle and may allow an attacker to gain a root shell on this host by logging in as 'anonymous' and providing a carefully crafted format string as its email address. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11391...

CVE-2003-1075

Unknown vulnerability in the FTP server in.ftpd for Solaris 2.6 through 9 allows remote attackers to cause a denial of service temporary FTP server hang, which affects other active mode FTP clients...

PlatinumFTPServer 1.0.6 - Arbitrary File Deletion

PlatinumFTPServer 1.0.6 - Arbitrary File Deletion source: https://www.securityfocus.com/bid/6493/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is...

CVE-2002-0930

Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 NWFTPD allows remote attackers to cause a denial of service ABEND via format strings in the USER command...

FTP bounce attack through Raptor Firewall

It;s possible to make FTP server behind firewall to connect to any IP and TCP port in internal network, since PORT command with internal adress doesn't processed correctly...

SECURITY.NNOV: Buffer overflows in Worldgroup

Dear bugtraq, Topic: buffer overflows in WorldGroup 3.0 ftp and web servers Authors: Limpid Byte team http://lbyte.void.ru, [email protected] Date: February, 25 2002 Software: WorldGroup 3.x Vendor: Galacticomm http://www.gcomm.com/ Risk: High Remote: Yes Exploitable: Yes Vendor Status: Not contacted...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

CVE-2001-0621

The FTP server on Cisco Content Service 11000 series switches CSS before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

CVE-2001-0421

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...

A-FTP Anonymous FTP Server Remote DoS attack Vulnerability

A-FTP Anonymous FTP Server Remote DoS attack Vulnerability Cartel Advisory Code: CART-0102 Vendor Affected: A-FTP Server - Eirik Helgeland [email protected] / [email protected] What It Is from the author: A free Unix Compatible Anonymous FTP server, running hidden from the user. Can be starte...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...

Broker Ftp Server 5.0 Vulnerability

Vulnerability: users can break out of their root directory and list directories. Depending on the priv. you have other commands like delete maybe executed outside of the home. directory. e:crap was used as homedir. deleting files in e:crap is enabled Detail: Problem: Again relative paths. dir:...