cqure.net.20020521.netware_nwftpd_fmtstr

cqure.net Security Vulnerability Report No: cqure.net.20020521.netwarenwftpdfmtstr ============================================ Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the FTP server to ABEND resulting in...

CVE-2001-1300

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2002-0336

Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / slash, wildcard, and .. characters...

CVE-2001-1043

The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...

CVE-2001-1043

ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...

CVE-2001-1295

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2001-1295

CVE-2001-1295 is a directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the CD command. The available sources confirm the affected software and the traversal nature but do not provide exploit...

CVE-2001-1295: Undefined Security Weakness

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2001-1043: Improper Link Resolution Before File Access

ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...

CVE-2002-0405

CVE-2002-0405 concerns Transsoft Broker FTP Server 5.0 evaluation. It describes a buffer overflow triggered by a CWD command containing a large number of dots, allowing remote denial of service and possibly arbitrary code execution. The provided connected documents do not include explicit exploit...

CVE-2002-0405

Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . dot characters...

CVE-2002-0606

Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long commands such as login...

CVE-2002-0558

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...

CVE-2002-0558

TYPSoft FTP Server is affected by a directory traversal flaw in versions 0.97.1 and earlier, allowing a remote authenticated (or possibly anonymous) user to list arbitrary directories via a LIST command using .. with a wildcard. The root cause is a traversal vulnerability in the LIST handling (an...

CVE-2002-0606

CVE-2002-0606 affects the 3Cdaemon 2.0 FTP server. A buffer overflow allows remote attackers to crash the service and potentially execute arbitrary code via long commands such as login. The provided documents describe the vulnerability and impact (denial of service and potential code execution) b...

CVE-2002-0558: Undefined Security Weakness

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...

CVE-2002-0405: Undefined Security Weakness

Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . dot characters...

CVE-2002-0606: Undefined Security Weakness

Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long commands such as login...

MPEi/X Default FTP Accounts

The remote FTP server has one or more accounts with a blank password. This script was written by H D Moore See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, changed family 11/04/10 include"compat.inc"; ifdescription scriptid11000; scriptversion "1.22";...

[[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS

Telhack 026 Inc. Security Advisory - 3 Name: Shambala Server 4.5 Impact: Major FTP Server vuln., Medium Web Server vuln. Date: June 30 / 2002 Daniel Nystrm a.k.a. excE [email protected] I N F O Shambala Server is a personal Web/FTP server for Win 9/NT. When the web server is started it also start...