NGC Active FTPServer 2002 Multiple Command Remote DoS

The remote host is running Active FTP server, a shareware FTP server for Windows-based systems. There is a flaw in the version of ActiveFTP which may allow an attacker to crash this service remotely by sending an overly long argument to various FTP commands USER, CWD, and more. The attack can onl...

EnceladusServerSuite3.9.11.txt

Enceladus Server suite 3.9.11 Release Date: ------------- June 15,2003 Severity --------- HighRemote crash-code execution Systems Affected: ----------------- Enceladus Server Suite 3.9.11 possibly all the older versions are vulnerable Description: Enceladus Server Suite is a package that contains...

SmartFTP Multiple Command Response Overflow

The remote host is running SmartFTP - an FTP client. There is a flaw in the remote version of this software that could allow an attacker to execute arbitrary code on this host. To exploit it, an attacker would need to set up a rogue FTP server and have a user on this host connect to it. C Tenable...

WWW&FTP Server directory traversal

Directory traversal with /../...

LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

This module exploits a buffer overflow in the LeapWare LeapFTP v2.7.3.600 client that is triggered through an excessively long PASV reply command. This module was ported from the original exploit by drG4njubas with minor improvements. Module Options msf use exploit/windows/ftp/leapftp/pasvreply m...

SRT2003-06-05-0935 - HPUX ftpd remote issue via REST

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Buffer overflow in ArgoSoft FTP Server

Product: ArGoSOft FTP Server Version: 1.22 other ? OffSite: http://www.argosoft.com/ Problem: Remote buffer overflow -------------------------------------------------------------- ArGoSOft FTP Server - FTP server for Windows. He is exposed to attack. The server does not process the input data...

CVE-2003-1206

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

Format String Vulnerability in Crob Ftp Server

Package: Crob Ftp Server Auth: Crob Software Studio www.crob.net/studio/ftpserver/ Version: 2.50.4 Build 228 Vulnerability: Format String Risk: High Vulnerability Description: A format string flaw in the authentication process allows remote attackers without valid user/pass to execute arbitrary...

PFTP Cleartext Local Password Disclosure

The remote web server is running PFTP. This software stores the list of user names and passwords in clear text in \Program Files\PFTP\PFTPUSERS3.USR. An attacker with a full access to this host may use this flaw to gain access to other FTP servers used by the same users. C Tenable Network Securit...

Crob FTP server Fotmat string bug

Format string bug in processing USER command...

Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access

The remote FTP server is vulnerable to a flaw that allows users to access files outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : ftp quote stat ../ Some versions of VisNetic FTP Server and Titan FTP Server are known to be affected by this issue. C...

Crob FTP Server 2.50.4 - Remote Username Format String

Crob FTP Server 2.50.4 - Remote Username Format String source: https://www.securityfocus.com/bid/7776/info A vulnerability has been reported for Crob FTP Server. The problem occurs due to invalid format specifiers used when displaying a user-supplied username. As a result, it may be possible for ...

Crob FTP Server user Field Remote Format String

The version of Crob FTP server running on the remote host has a format string vulnerability when processing the USER command. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; References: Date: 2 Ju...

Crob FTP Server 2.50.4 - Remote 'Username' Format String

source: https://www.securityfocus.com/bid/7776/info A vulnerability has been reported for Crob FTP Server. The problem occurs due to invalid format specifiers used when displaying a user-supplied username. As a result, it may be possible for an attacker to embed format specifiers within a malicio...

pablo software Solutions baby ftp server 1.2 - Directory Traversal

pablo software Solutions baby ftp server 1.2 - Directory Traversal source: https://www.securityfocus.com/bid/7749/info It has been reported that Baby FTP Server does not properly handle some types of requests. This may make it possible for a remote user to gain access to resources outside of the...

pablo software Solutions baby ftp server 1.2 - Directory Traversal

source: https://www.securityfocus.com/bid/7749/info It has been reported that Baby FTP Server does not properly handle some types of requests. This may make it possible for a remote user to gain access to resources outside of the FTP root directory. CWD ... CWD /... CWD /...... CWD ... CWD ...CWD...

CVE-2003-0271

Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...

BlackMoon FTP Server blackmoon.mdb Plaintext Password Disclosure

BlackMoon FTP server is installed on the remote host. FTP usernames and passwords are stored on the server in plaintext in a filed called 'blackmoon.mdb.' Any user with an account on this host may read the credentials stored in this file, and use them to connect to this FTP server. C Tenable...

CVE-2003-0342

Summary: CVE-2003-0342 affects BlackMoon FTP Server 2.6 Free Edition (and possibly other distributions). Affected component is the blackmoon.mdb database where usernames and passwords are stored in plaintext. The underlying issue enables local users who have an account on the host to read credent...