CVE-2003-1158

CVE-2003-1158 reports multiple buffer overflows in the FTP service of Plug and Play Web Server 1.0002c, allowing remote users to crash the server via long FTP commands (dir, ls, delete, mkdir, DELE, RMD, MKD). The provided documents do not specify exact vulnerable components, versions beyond the ...

CVE-2005-0276

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service application crash via format string specifiers in 1 the username, 2 cd, 3 delete, 4 rename, 5 rmdir, 6 literal, 7 stat, or 8 CWD commands...

CVE-2005-0277

Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash and execute arbitrary code via 1 a long username in the USER command or 2 an FTP command that contains a long argument, such as cd, send, or ls...

adpl33t.txt

Adp Elite system is an invoice/purchase order suite very common in car dealerships. It's a telnet based system. When a user logs in via telnet, adp dumps the user into the program where the user can check on a vehicle's status, generate PO's and RO's, etc.... The program is rather large and runs ...

HP-UX Security patch : PHNE_22057

The remote host is missing HP-UX Security Patch number PHNE22057 . Sec. Vulnerability in ftpd Rev.03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17105; scriptversion"1.7";...

CVE-2005-0278

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

CVE-2005-0278

The CVE-2005-0278 entry concerns the FTP service of 3Com 3CDaemon/3CServer (2.0, revision 10). A remote attacker can trigger an information disclosure by issuing a CD command containing an MS-DOS device name, causing an error message that reveals the installation path. Affected component is the F...

CVE-2005-0315

The CVE-2005-0315 entry concerns the FTP service in Magic Winmail Server 4.0 Build 1112, where the FTP PORT command does not verify that the command IP matches the FTP session user’s IP. This permits remote authenticated users to use the server as an intermediary for port scanning. The connected ...

CVE-2005-0276

CVE-2005-0276 : The 3Com 3CDaemon 2.0 revision 10 FTP service is affected by multiple format string vulnerabilities in commands (username, cd, delete, rename, rmdir, literal, stat, CWD) that can cause a remote denial of service (application crash). This assessment is based on the NVD description;...

CVE-2005-0277

Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash and execute arbitrary code via 1 a long username in the USER command or 2 an FTP command that contains a long argument, such as cd, send, or ls...

CVE-2005-0276

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service application crash via format string specifiers in 1 the username, 2 cd, 3 delete, 4 rename, 5 rmdir, 6 literal, 7 stat, or 8 CWD commands...

[SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities

SIG^2 Vulnerability Research Advisory Magic Winmail Server v4.0 Multiple Vulnerabilities by Tan Chew Keong Release Date: 27 Jan 2005 ADVISORY URL http://www.security.org.sg/vuln/magicwinmail40.html SUMMARY Magic Winmail Server http://www.magicwinmail.net/ is an enterprise class mail server softwa...

CVE-2005-0315

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning...

Magic Winmail Server 4.0 (Build 1112) - download.php Traversal Arbitrary File Access

Magic Winmail Server 4.0 Build 1112 - download.php Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface...

Magic Winmail Server 4.0 (Build 1112) - upload.php Traversal Arbitrary File Upload

Magic Winmail Server 4.0 Build 1112 - upload.php Traversal Arbitrary File Upload source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowi...

Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads. There is also a HTML injection...

Magic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload

source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads. There is also a HTML injection...

Hummingbird Connectivity FTP Service XCWD Command Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site from sharing some resources with the rest of the world...

Unsecure Ftpd on HP PSC 2510 Printer

Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...

Service Detection: 3 ASCII Digit Code Responses

This plugin is a complement of findservice1.nasl. It attempts to identify services that return 3 ASCII digits codes ie: FTP, SMTP, NNTP, ... C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14773; scriptversion"1.60"; scriptsetattributeattribute:"pluginmodificationdate"...