CVE-2001-0263

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...

GoodTech FTP Server Connection Saturation DoS

The remote host appears to be running GoodTech FTP Server for Windows. It was possible to disable the remote FTP server by connecting to it about 3000 separate times. If the remote server is running from within xinetd, this is a feature and the FTP server should automatically be back in a couple ...

QNX RTP FTP stat Command strtok() Function Overflow

The remote FTP server is vulnerable to a stack overflow when calling the 'strtok' function. An attacker can exploit this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10692; scriptversion"1.28"; scriptcvsdate"Date:...

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack b...

Rumpus FTP Server 1.3.x/2.0.3 - Stack Overflow Denial of Service

source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack by making a directory with an unusual number of sub-folders. This...

TransSoft Broker FTP Server 3.04.04.75.x - CWD Buffer Overflow

TransSoft Broker FTP Server 3.04.04.75.x - CWD Buffer Overflow source: https://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence ca...

TransSoft Broker FTP Server 3.0/4.0/4.7/5.x - CWD Buffer Overflow

source: https://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence can, if repeatedly issued, create a buffer overflow causing the...

alt3kx-advisories-2001.txt

====================================================================== QVT/NET 4.3 FTP server Directory Traversal Author: alt3kx! Date: 2001-05-22 Site: www.raza-mexicana.org Greet to: 0x90, drfdisk^, Dex, PaTa Teams: Raregazz - X-ploit and S0d vicente F0x no rulas wey!...

CVE-2001-0255

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name e.g. C: in the requested pathname...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2001-0256

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...

ACLogic CesarFTP 0.98b - Directory Traversal

ACLogic CesarFTP 0.98b - Directory Traversal source: https://www.securityfocus.com/bid/2786/info CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems. CesarFTP on Windows 98/Me platforms contains a 'directory traversal' vulnerability. If a user requests to change...

ACLogic CesarFTP 0.98b - Directory Traversal

source: https://www.securityfocus.com/bid/2786/info CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems. CesarFTP on Windows 98/Me platforms contains a 'directory traversal' vulnerability. If a user requests to change directories to "..." from within a mapped directory,...

CVE-2001-0452

CVE-2001-0452 affects the BRS WebWeaver FTP server prior to 0.64 Beta. The vulnerability allows a remote attacker to obtain the real pathname of the server by issuing a sequence: first a problematic CD * command, followed by an ls. The available documents confirm the affected product and the exac...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 (BPFTP Server 2.10) is affected by an information-disclosure flaw where attackers can read file attributes outside the FTP root via SIZE and MDTM when the show relative paths option is disabled. Root cause: inadequate restriction of access to attributes outside the FTP roo...

CVE-2001-0421

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...

CVE-2001-0480

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...

CVE-2001-0264

Summary (CVE-2001-0264): Gene6 G6 FTP Server 2.0 (also BPFTP Server 2.10) exposes NetBIOS credentials when information about a file in a network share is requested, causing the server to send credentials to the share owner’s host and enabling eavesdropping. Affected component: BPFTP/G6 FTP Server...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...