Wyse Rapport Hagent Fake Hserver Command Execution

This module exploits the Wyse Rapport Hagent service by pretending to be a legitimate server. This process involves starting both HTTP and FTP services on the attacker side, then contacting the Hagent service of the target and indicating that an update is available. The target will then download...

Design/Logic Flaw

Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services IIS 5.0 through 7.0 allows remote authenticated users to cause a denial of service daemon crash via a list ls -R command containing a wildcard that references a subdirectory, followed by a .. dot dot, ak...

CVE-2009-2521

CVE-2009-2521 affects Microsoft IIS FTP Server 5.0–7.0. A DoS is triggered by a remote authenticated user sending a LIST -R command with a wildcard that references a subdirectory and then .., causing stack exhaustion and daemon crash. Public exploitation modules (Metasploit/MSF, Exploit-DB) and O...

Microsoft IIS FTPd Denial Of Service

MS IIS FTPD DoS ZER0DAY There is a DoS vulnerability in the globbing functionality of IIS FTPD. Anonymous users can exploit this if they have read access to a directory!!! Normal users can exploit this too if they can read a directory. Example session where the anonymous user has read access to t...

CVE-2009-3023

Buffer overflow in the FTP Service in Microsoft Internet Information Services IIS 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST NAME LIST command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."...

Buffer overflow

Buffer overflow in the FTP Service in Microsoft Internet Information Services IIS 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST NAME LIST command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."...

CVE-2009-3023

Buffer overflow in the FTP Service in Microsoft Internet Information Services IIS 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST NAME LIST command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."...

HTC / Windows Mobile OBEX FTP Service - Directory Traversal

I shall complete the information related to Bugtraq ID: 33359 Title: HTC / Windows Mobile OBEX FTP Service Directory Traversal Author: Alberto Moreno Tablado Vendor: HTC Vulnerable Products: - HTC devices running Windows Mobile 6 - HTC devices running Windows Mobile 6.1 Non vulnerable products: -...

TYPSoft FTP Server 1.11 - 'ABORT' Remote Denial of Service

/ Soft : TYPSoft FTP Server Version: 1.11 Denial of Service in TYPSoft FTP Server up to 1.11 no crash Just the server is saturated, it stops responding. -------------------------------------------------------------------------------------- The vulnerability is caused due to an error in handling t...

CVE-2008-6576

Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 CS1K 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service resource exhaustion and failed updates via unknown vectors that causes...

Design/Logic Flaw

Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 CS1K 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service resource exhaustion and failed updates via unknown vectors that causes...

CVE-2008-6576

Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 CS1K 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service resource exhaustion and failed updates via unknown vectors that causes...

CVE-2008-6576

Affected product: Nortel Communications Server 1000 (CS1K) 4.50.x running on VGMC or signaling nodes. Component: FTP service, specifically the "session limitation technique." Vulnerability: Unspecified issue in the FTP service allows remote attackers to cause a denial of service by exhausting all...

XM Easy Personal FTP Server 5.7.0 - 'NLST' Denial of Service

/ XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int srvconnect; int sockaddrlong; struct sockaddrin sockaddrmysocket;...

Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities

Femitter FTP Server 1.x - Authenticated Multiple Vulnerabilities / Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be...

Telnet-Ftp Service Server 1.x Traversal / Deletion / Creation

/ Telnet-Ftp Service Server v1.x ------------------------------ Multiple Vulnerability: -Remote Creat File -Remote Delet File -Remote Creat Directory -Remote Delet Directory -Remote Get File -Remote Crash...

Telnet-Ftp Service Server 1.x - (Authenticated) Multiple Vulnerabilities

Telnet-Ftp Service Server 1.x - Authenticated Multiple Vulnerabilities / Telnet-Ftp Service Server v1.x ------------------------------ Multiple Vulnerability: -Remote Creat File -Remote Delet File -Remote Creat Directory -Remote Delet Directory -Remote Get File -Remote Crash...

Telnet-Ftp Service Server 1.x - (Authenticated) Multiple Vulnerabilities

/ Telnet-Ftp Service Server v1.x ------------------------------ Multiple Vulnerability: -Remote Creat File -Remote Delet File -Remote Creat Directory -Remote Delet Directory -Remote Get File -Remote Crash...

Telnet-Ftp Service Server v1.x Multiple Vulnerabilities (post auth)

Exploit for unknown platform in category remote exploits =================================================================== Telnet-Ftp Service Server v1.x Multiple Vulnerabilities post auth =================================================================== / Telnet-Ftp Service Server v1.x...

Directory traversal

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read...