Rhinosoft Serv-U FTP Multiple Vulnerabilities

This host is running Serv-U FTP Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodservuftpservermultvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Rhinosoft Serv-U FTP Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

Rhinosoft Serv-U FTP Multiple Vulnerabilities

Serv-U FTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rhinosoft Serv-U FTP Server Version Detection

This script finds the installed Rhinosoft Serv-U FTP Server and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodservuftpserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Rhinosoft Serv-U FTP Server Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

Femitter FTP Server 1.x Traversal / File Manipulation

/ Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be exploited to read, modify, or delete arbitrary files from the affected...

Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)

Exploit for windows platform in category remote exploits ============================================================ Femitter FTP Server 1.x Multiple Vulnerabilities post auth ============================================================ / Femitter Server FTP 1.x Multiple Vulnerability...

Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit

Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit / Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FT...

Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit

Exploit for windows platform in category remote exploits ============================================================ Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit ============================================================ / Sysax Multi Server v4.3 Remote Delete Files. Server FTP...

Directory traversal

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031

The CVE-2009-1031 issue affects Rhino Software Serv-U File Server versions 7.0.0.1 through 7.4.0.1. The vulnerability is a directory traversal in the FTP server that allows an unauthenticated remote attacker to create arbitrary directories via a MKD request using a backslash-dot-dot sequence (..)...

CVE-2009-1031

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

Sql injection

The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service service hang via a large number of SMNT commands without an argument...

CVE-2009-0967

Affected software: Serv-U FTP Server (versions 7.0.0.1–7.4.0.1). Vulnerability: Denial of Service caused by remote authenticated users sending a large number of SMNT commands without an argument, leading to a service hang. Root cause / impact: Not explicitly detailed beyond the DoS condition; imp...

CVE-2009-0967

The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service service hang via a large number of SMNT commands without an argument...

Xlight FTP Server 3.2 - user SQL Injection

Xlight FTP Server 3.2 - user SQL Injection source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Serv-U FTP服务器(7.4.0.1) MKD命令目录遍历漏洞

BUGTRAQ ID: 34125 Serv-U FTP是一款FTP服务程序。 如果远程攻击者向Serv-U FTP服务器发送了包含有“\..”字符序列的MKD请求的话，就可以通过目录遍历攻击绕过FTP root限制在系统上创建任意目录。 RhinoSoft Serv-U 7.4.0.1 厂商补丁： RhinoSoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.serv-u.com/ http://sebug.net/exploit/10827/...

Xlight FTP Server 3.2 - 'user' SQL Injection

source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Serv-U FTP服务器SMNT命令远程拒绝服务漏洞

BUGTRAQ ID: 34127 Serv-U FTP是一款FTP服务程序。 如果远程攻击者向Serv-U FTP服务器发送特制SMNT请求的话，就可以导致服务器停止响应。 RhinoSoft Serv-U 7.4.0.1 厂商补丁： RhinoSoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.serv-u.com/ http://www.sebug.net/exploit/5979/...

RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories

RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on th...

RhinoSoft Serv-U FTP Server 7.4.0.1 - SMNT (Authenticated) Denial of Service

RhinoSoft Serv-U FTP Server 7.4.0.1 - SMNT Authenticated Denial of Service !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web:...