FreeBSD-SA-00:29.wu-ftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:29 Security Advisory FreeBSD, Inc. Topic: wu-ftpd port contains remote root compromise REVISED Category: ports Module: wu-ftpd Announced: 2000-07-05 Revised: 2000-07-11...

Concerning the LDAP Enabled Netscape FTP Server

Over the last few days a great number of people have mailed us in regards to the "Netscape Professional Services FTP Server Vulnerability" http://www.securityfocus.com/bid/1375 discovered by Michal Zalewski [email protected] and posted to the Bugtraq mailing list on Wed, 21 Jun 2000. The following...

Dragon FTP USER Command Remote Overflow

It was possible to crash the remote FTP server by issuing a USER command followed by a very long argument over 16,000 characters. This is likely due to a remote buffer overflow vulnerability. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable...

Netscape FTP Server - "Professional" as hell :>

Standard disclaimer applies. These are my private oppinions and observations. Netscape Professional Services FTP server is used on high-performance servers for accessing virtual webserver accounts etc. It works with LDAP and seems to be quite often shipped by Sun with ISP instalations. Due to poo...

WU-FTPD SITE EXEC/INDEX Format String Vulnerability

This module exploits a format string vulnerability in versions of the Washington University FTP server older than 2.6.1. By executing specially crafted SITE EXEC or SITE INDEX commands containing format specifiers, an attacker can corrupt memory and execute arbitrary code. Module Options msf use...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

netscape.ftp.txt

Standard disclaimer applies. These are my private oppinions and observations. Netscape Professional Services FTP server is used on high-performance servers for accessing virtual webserver accounts etc. It works with LDAP and seems to be quite often shipped by Sun with ISP instalations. Due to poo...

Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 - FTP Server

Netscape Professional Services FTP Server LDAP Aware 1.3.6 - FTP Server source: https://www.securityfocus.com/bid/1411/info Certain versions of the LDAP-aware Netscape Professional Services FTP Server distributed with Enterprise Web Server have a serious vulnerability which may lead to a remote o...

Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 - FTP Server

source: https://www.securityfocus.com/bid/1411/info Certain versions of the LDAP-aware Netscape Professional Services FTP Server distributed with Enterprise Web Server have a serious vulnerability which may lead to a remote or local root compromise. The vulnerability in essence is a failure of of...

CVE-2000-0479

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...

Переполнение кучи в Eserv

Переполнение кучи в FTP-сервере команда MKD. Поскольку переполнение затрагивает только одну нить процесса, не известно, возможно ли использовать ошибку даже для DoS-атаки...

Etype Eserv 2.9.2 - Logging Buffer Overflow

source: https://www.securityfocus.com/bid/1315/info EType EServ is a combination mail, news, HTTP, FTP, and proxy server. The logging mechanism in EType EServ is vulnerable to a heap buffer overflow that could allow remote attackers to execute arbitrary code on the server. The overflow occurs whe...

CVE-1999-0950

CVE-1999-0950 describes a buffer overflow in the WFTPD FTP server triggered by a sequence of MKD and CWD commands that create nested directories. The underlying vulnerability allows a remote attacker to gain root privileges on affected systems. The issue is a classic WU-FTPD-related overflow scen...

CVE-1999-0950: Undefined Security Weakness

Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories...

cgimail.txt

Advisory: CGIMailer v3.01 for Windows 95/98/2000/NT4.0 Chopsui-cideMmM The Mad Midget Mafia - http://midgets.box.sk/ ======================================================================= Summary: ========== Date released: 15/03/2000 dd/mm/yyyy. Risk: reading of private files. Vulnerability foun...

Webstar 4.0 Buffer overflow vulnerability

Sorry for my poor english ; Webstar 4.0 and earlier, vendor www.starnine.com is popular or not popular -i've never seen MacOS Web, Mail and FTP server for MacOS.One day, when i played with my telnet i found machine with this httpd.When i made long get request 1kb GET /1111111...111.htmlit simply...

CVE-2000-0150

Check Point FireWall-1 is affected by CVE-2000-0150, where the FTP PASV handling flaw in stateful inspection allows remote attackers to bypass FTP data-connection restrictions by causing the firewall to misinterpret crafted packets as a valid PASV response. The vulnerability stems from layering v...

CVE-2000-0150: Undefined Security Weakness

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt...

ftp-ozone.c.txt

/ ftp-ozone.c Demonstrate a basic layer violation in "stateful" firewall inspection of application data within IP packets - @$@$!: http://www.checkpoint.com/techsupport/alerts/pasvftp.html Dug Song / include include include include include include include include include include include include...

fw1-ftp.txt

FireWall-1 FTP Server Vulnerability Background Paper 1, data protect AG John McDonald Thomas Lopatic References ---------- Please reference the recent vuln-dev posting by Mikael Olsson entitled, "Breaking through FTP ALGs -- is it possible?" At the time of this writing, it was not yet archived on...