7189 matches found
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings...
CVE-2001-0263
Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...
CVE-2001-0480
CVE-2001-0480 involves a directory traversal vulnerability in Alex’s FTP Server 0.7 . An attacker can read arbitrary files by sending a modified dot dot sequence in either the GET or CD commands, exploiting improper path handling. The connected records confirm the affected product/version and the...
CVE-2001-0421
The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...
CVE-2001-0248
HP-UX ftpd glob() Expansion STAT Buffer Overflow (CVE-2001-0248): The HP-UX 11 FTP server is affected by a buffer overflow triggered by the STAT command when a long pathname is expanded via glob(), allowing remote attackers to execute arbitrary commands. Affected component: HP-UX FTP daemon; root...
CVE-2001-0452: Undefined Security Weakness
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...
CVE-2001-0480: Undefined Security Weakness
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...
CVE-2001-0421: Undefined Security Weakness
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...
CVE-2001-0248: Incorrect Calculation of Buffer Size
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings...
CVE-2001-0263: Undefined Security Weakness
Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...
CVE-2001-0264: Undefined Security Weakness
Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...
Maxum Rumpus FTP Server 1.3.21.3.42.0.3 dev - Remote Denial of Service
Maxum Rumpus FTP Server 1.3.21.3.42.0.3 dev - Remote Denial of Service source: https://www.securityfocus.com/bid/2716/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. It is possible to log in remotely to the server and shut down the servic...
Maxum Rumpus FTP Server 1.3.2/1.3.4/2.0.3 dev - Remote Denial of Service
source: https://www.securityfocus.com/bid/2716/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. It is possible to log in remotely to the server and shut down the service by making a directory with a name that is 65 characters long. Users...
Hexyn / Securax Advisory #17 - Bison FTP Server Directory Traversal
Hexyn / Securax Advisory 17 - Bison FTP Server Directory Traversal Topic: Bison FTP Server Directory Traversal Announced: 2001-02-17 Affects: Bison FTP Server version 4 Release 1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...
Hexyn / Securax Advisory #17 - Bison FTP Server Directory Traversal
Hexyn / Securax Advisory 16 - Ghetto FTP Server Directory Traversal Topic: Ghetto FTP Server Directory Traversal Announced: 2001-02-17 Affects: Ghetto FTP Server version 1.0 beta 1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...
Hexyn / Securax Advisory #15 - G6 FTP Full Installation Path
Hexyn / Securax Advisory 15 - G6 FTP Full Installation Path Topic: G6 FTP Full Installation Path Announced: 2001-02-17 Affects: G6 FTP Server up to version 2.0 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE INFORMATION BELOW IS 100...
Vulnerabilty in TYPsoft FTP server
Vulnerabilty in TYPsoft FTP server v0.95 Overview: TYPsoft FTP Server is a freeware ftp server available from http://typsoft.n3.net . Affected systems: FTP server v0.95 - 0.93 and probably prior versions for Windows 95/98/NT/2000/ME Description: An attacker with anonymous access to the ftp server...
CVE-2000-0577
The vulnerability CVE-2000-0577 affects Netscape Professional Services FTP Server 1.3.6. It allows remote attackers to read arbitrary files using a directory-traversal (“..”) attack against the FTP service. The provided documents do not include remediation steps or patched versions. If exploitati...