7192 matches found
CVE-2003-0343
BlackMoon FTP Server 2.6 Free Edition (and possibly other versions) returns an "Account does not exist" message when an invalid username is provided, enabling an attacker to enumerate valid accounts and, as a consequence, facilitate brute‑force login attempts. The Nessus plugin confirms the enume...
CVE-2003-0342
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...
CVE-2003-0343
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...
CVE-2003-0342: Undefined Security Weakness
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...
CVE-2003-0343: Undefined Security Weakness
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...
Prishtina FTP Client 1.x - Remote Denial of Service
source: https://www.securityfocus.com/bid/7671/info Prishtina FTP client is allegedly prone to a denial of service vulnerability. The condition is reportedly triggered when processing FTP server banners of excessive length. As a result, a malicious attacker-controlled server may be used to crash ...
[[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration
Telhack 026 Inc. Security Advisory - 4 Name: Blackmoon FTP Server 2.6 Free Edition Impact: Medium Date: May 21 / 2003 Daniel Nystrm a.k.a. excE [email protected] I N F O BlackMoon FTP Server is an FTP daemon written specifically for Windows 2000/XP and above. It takes advantage of all the new...
CVE-2003-0343
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...
CVE-2003-0342
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...
CVE-2003-0271
CVE-2003-0271: Buffer overflow in Personal FTP Server allows remote code execution via a long USER argument. Documented impact indicates arbitrary code execution possible; CVSS v2 base score 7.5 (HIGH). Connected sources corroborate the vulnerability class (buffer overflow) but do not provide spe...
CVE-2003-0271
Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...
CVE-2003-0271: Undefined Security Weakness
Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...
FTP Server root Directory .rhosts File Present
The remote anonymous FTP server has a .rhosts file set in its home directory. An attacker may use it to determine the trust relationships between this server and other hosts on the network. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11566; scriptversion"$Revision:...
FTP Server root Directory .forward File Present
The remote anonymous FTP server has a .forward file set in its home. An attacker may use it to determine who is in charge of the FTP server and set up a social engineering attack. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11565; scriptversion "$Revision: 1.18 $";...
BRS WebWeaver: Ftpd Lockdown via RETR cmd
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: Ftpd Lockdown via RETR cmd product: BRS WebWeaver 1.04 and prior vendor: http://www.brswebweaver.com risk: high date: 04/23/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
Cerberus FTP Server 2.1 - Information Disclosure
source: https://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may exploit a weakness in error handling to disclose val...
Cerberus FTP Server 2.1 - Information Disclosure
Cerberus FTP Server 2.1 - Information Disclosure source: https://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may...
Hyperion FTP server Remote DOS and unauthorised remote access.
08/04/03 DataSEC Advisory http://www.data-sec.com ------------------------------------------------------- Application: Hyperion FTP Server Web Site: http://www.mollensoft.com Versions: 3.0.0 Platform: Windows Bug: Buffer Overflow. Risk: Remote DOS and unauthorised remote access...
