7191 matches found
CVE-2002-1545: Undefined Security Weakness
CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response...
Multiple FTP Server setproctitle Function Arbitrary Command Execution
The remote FTP server misuses the function setproctitle and may allow an attacker to gain a root shell on this host by logging in as 'anonymous' and providing a carefully crafted format string as its email address. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11391...
SunFTP Multiple Command Traversal Arbitrary File Creation/Deletion
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT. This script was written by Xue Yong Zhi See the Nessus Scripts License for details Changes by...
WU-FTPD Unspecified Security Issue
The version of WU-FTPD running on the remote host has an unspecified remote vulnerability. This is reportedly due to an unspecified bug in glob.c discovered by the SuSE security team. Nessus verified this vulnerability by looking at the banner of the remote FTP server. C Tenable Network Security,...
Directory traversal in multiple FTP servers
It's possible to leave outside FTP root...
CVE-2003-1075
Unknown vulnerability in the FTP server in.ftpd for Solaris 2.6 through 9 allows remote attackers to cause a denial of service temporary FTP server hang, which affects other active mode FTP clients...
PlatinumFTPServer Multiple Vulnerabilities
Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server : - The 'dir' command can be used to examine the filesystem of the machine and gather further information about the...
Directory traversal vulnerabilities found in NITE ftp-server version 1.83
Directory traversal vulnerabilities found in NITE ftp-server version 1.83 Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY The NiteServer is a simple FTP-Server program with some special features. It is free and easy to...
Vulnerabilties in Xynph FTP Server 1.0
Vulnerabilties in Xynph FTP Server 1.0 Xynph FTP Server allows Directory Traversal Example: Verbindung mit zero-x. 220 Herzlich Willkommen! -Xynph FTP-Server- Benutzer zero-x:none: anonymous 331 Password required for anonymous. Kennwort: billsucks 230 User anonymous logged in. Ftp pwd 257...
Xynph FTP Server 1.0 - Directory Traversal
Xynph FTP Server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/6587/info A problem with the handling of input has been reported in Xynph FTP Server. Under some circumstances, it may be possible for a remote user to escape the FTP root directory using relative path notation...
BRS WebWeaver FTP Server vulnerabilities
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver FTP Server vulnerabilities product: BRS WebWeaver 1.01 FTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/10/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls: http://f0kp.iplus.ru/bz/012.en.t...
Xynph FTP Server 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/6587/info A problem with the handling of input has been reported in Xynph FTP Server. Under some circumstances, it may be possible for a remote user to escape the FTP root directory using relative path notation. This could allow unauthorized access to...
PlatinumFTPServer 1.0.6 - Directory Traversal
PlatinumFTPServer 1.0.6 - Directory Traversal source: https://www.securityfocus.com/bid/6554/info PlatinumFTPserver is an FTP server for Microsoft Windows systems. It is commercially available, and distributed by PlatinumFTP. A directory traversal vulnerability has been reported in...
CVE-2002-2238
Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...
CVE-2002-2209
Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors...
CVE-2002-2387
Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the LS command...
CVE-2002-1978
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command...
PlatinumFTPServer 1.0.6 - Arbitrary File Deletion
PlatinumFTPServer 1.0.6 - Arbitrary File Deletion source: https://www.securityfocus.com/bid/6493/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is...
Hyperion FTP Server buffer overflow
hi Hyperion FTP Server http://www.mollensoft.com/ is a powerful, reliable FTP server for Windows 95/98/NT/2000, and supports all basic FTP commands, and much more, such as passive mode. A vulnerability exists in Hyperion Ftp Server version 2.8.11which allows a remote user to execute an arbitrary...