Sun StorEdge 3510 FC Array FTP远程拒绝服务漏洞

BUGTRAQ ID: 26086 Sun StorEdge 3510 FC Array是企业级的数据管理解决方案。 Sun StorEdge 3510 FC Array的固件FTP服务实现上存在漏洞，远程特定用户可能导致拒绝服务。 访问了阵列的管理Ethernet接口所连接的管理网络的远程非特权用户可以导致阵列不响应数据服务。 如果出现了上述漏洞，从受影响阵列请求了I/O服务的主机可能报告I/O请求超时，最终从阵列离线， 阵列事件日志中可能出现类似于以下的消息： Tue Jan 24 14:03:06 2007 Primary Warning Memory Not Sufficient...

CVE-2007-5482

Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service I/O request timeout and device hang via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service I/O request timeout and device hang via unspecified vectors...

CVE-2007-5482

Affected product : Sun StorEdge/StorageTek 3510 FC Array. Vulnerability class : unspecified vulnerability in the FTP service. Component/firmware : FTP service on the array with firmware before 4.21. Impact : remote attackers with access to the Ethernet management interface can cause a denial of s...

CVE-2007-5482

Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service I/O request timeout and device hang via unspecified vectors...

Command injection

The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service engine crash via a RETR command with a long pathname...

CVE-2007-1772

The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service engine crash via a RETR command with a long pathname...

Heap overflow

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

CVE-2007-0019

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

IBM AIX FTP临时端口耗尽拒绝服务漏洞

IBM AIX是一款商业性质的操作系统。IBM AIX捆绑的FTP服务程序ftpd允许在主机之间通过FTP协议进行文件传输。 IBM AIX的FTP客户端程序实现上存在漏洞，可能因为临时端口耗尽而导致拒绝服务。 这个服务程序中的漏洞可能允许攻击者使用系统中所有的临时端口。如果耗尽了临时端口范围的话，系统就无法再使用端口，导致系统范围内的网络拒绝服务。此外，ftpd使用套接字所消耗的内存还可能造成其他进程可用的系统资源耗尽，导致本地拒绝服务。 IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 临时解决方法：...

Cisco VPN Concentrator 3000 FTP Server Remote Manipulation (Exploit)

No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...

Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit

No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...

Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit

Exploit for hardware platform in category remote exploits ================================================================ Cisco VPN 3000 Concentrator = 4.1.7, 4.7.2 FTP Remote Exploit ================================================================ / Cisco VPN Concentrator 3000 FTP remote exploi...

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation...

Hummingbird Connectivity FTP service XCWD Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site from sharing some resources with the rest of the world...

CVE-2002-1974

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root...

CVE-2002-1974

The CVE-2002-1974 entry concerns the FTP service in Zaurus PDAs SL-5000D and SL-5500 that does not require authentication, enabling remote attackers to access the file system as root. Affected component: FTP service on the specified Zaurus models. Root cause: unauthenticated access to the FTP ser...

CVE-2002-1863

Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...

[SA15466] Solaris in.ftpd Wildcard Denial of Service Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2003-1158

Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denial of service crash via long 1 dir, 2 ls, 3 delete, 4 mkdir, 5 DELE, 6 RMD, or 7 MKD commands...