CVE-2010-3972

Heap-based buffer overflow in the TELNETSTREAMCONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted FTP...

CVE-2010-3972

Summary (CVE-2010-3972): A heap-based buffer overflow in the FTP service of Microsoft IIS (ftpsvc.dll) on IIS 7.0/7.5 enables remote code execution or DoS via a crafted FTP command. Affects Microsoft IIS FTP Service; root cause is improper handling of Telnet IAC data in TELNET_STREAM_CONTEXT::OnS...

PT-2010-5205

Name of the Vulnerable Software and Affected Versions Microsoft FTP Service versions 7.0 through 7.5 for Internet Information Services IIS 7.0 and 7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FTP command. This is due to a...

Microsoft IIS FTP Server Encoded Response Overflow Trigger

This module triggers a heap overflow when processing a specially crafted FTP request containing Telnet IAC 0xff bytes. When constructing the response, the Microsoft IIS FTP Service overflows the heap buffer with 0xff bytes. This issue can be triggered pre-auth and may in fact be exploitable for...

CVE-2010-2112

Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Directory traversal

Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-2112

The CVE-2010-2112 entry concerns FileCOPA FTP Server prior to version 5.03, which is reported to have a directory traversal vulnerability that allows remote attackers to read or overwrite arbitrary files via unknown vectors. Affected component: FileCOPA FTP service; root cause described as direct...

CVE-2010-2112

Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Xftp client 3.0 PWD Remote Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-new LocalPort = '21', Proto = 'tcp', Listen = '1' or die "Socket Not Created $!\n"; print "\n" . "Xftp client 3.0 PWD Exploit \n" . "Listening on port 21 \n" . "By:zombiefx Emai...

Xftp Client 3.0 PWD Buffer Overflow

Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link: http://www.netsarang.com/download/downxft3.html Version: Xftp 3.0 build 0238 Tested on: Windows XP SP3 Usage: ./xftpexploit The BOF occurs when sending an overly long PWD response. Code:...

Lexmark laser printers multiple security vulnereabilities

PJL processing buffer overflow, FTP service DoS...

Oracle XDB FTP Service UNLOCK Buffer Overflow

vulnerabilities network level/stack based buffer overflow + special network layer attack + implemented over http/XML-db/ftp==windows XDB + connecting:8080 = operation: win 32--xdb overflow + author mc2s3lector + yogyacarderlink.web.id/KeDai Computerworks.com exploit win32 include include include...

Golden FTP Server "DELE"command directory traversal vulnerability(0day)-vulnerability warning-the black bar safety net

Affected version: Golden FTP Server 4. x Vulnerability description: Golden FTP Server is a popular FTP service program. Golden FTP Server improperly handles the'DELE'command, a remote attacker could exploit the vulnerability to conduct directory traversal attacks to delete system files. Since the...

Core FTP Server 1.0 Build 319 - Denial of Service

Core FTP Server 1.0 Build 319 - Denial of Service Note: FTP account is not required for exploitation http://www.mertsarica.com I discovered a denial-of-service vulnerability on Core FTP Server product. When you send "USER test\r\n" and then kills the connection immediately, cpu increases to 100%...

Buffer overflow

Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service process crash or device reboot or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters...

CVE-2009-3947

Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service process crash or device reboot or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters...

CVE-2009-3947

CVE-2009-3947 affects Tandberg MXP Series devices (F7.0 and below) where the FTP service is vulnerable to a buffer overflow triggered by a long USER command (ending with many spaces). This can cause a remote denial of service (process crash or device reboot) and, as stated in sources, may potenti...

CVE-2009-3947

Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service process crash or device reboot or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters...

Wyse Rapport Hagent Fake Hserver Command Execution

$Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'timeout...

httpdx Server Version Detection

Detection of httpdx Server. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...