Microsoft Internet Information Server (IIS) vulnerable to DoS via malformed FTP connection status request

Overview A vulnerability in IIS could allow an intruder to disrupt ordinary operations of both FTP and Web services on vulnerable IIS servers. Description IIS includes an FTP server. An intruder who sends a malformed request for the status of an existing connection could cause the IIS server to...

CVE-1999-1148

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via many passive PASV connections at the same time...

CVE-1999-1148

CVE-1999-1148 affects the FTP service in IIS 4.0 and earlier, where remote attackers can cause a denial of service by opening many PASV connections concurrently. The available documents confirm the vulnerable component (IIS FTP), the root cause (resource exhaustion due to multiple PASV sessions),...

CVE-2001-0335

The CVE-2001-0335 issue affects Microsoft IIS FTP Service on IIS 5.0 and earlier. The vulnerability arises when a remote user supplies a username preceded by a special sequence of characters, causing the FTP service to enumerate Guest accounts in trusted domains. This could enable account discove...

CVE-2001-0334

Affected software: IIS FTP service on IIS 5.0 and earlier. Vulnerability: remote denial of service via a wildcard sequence that expands to a long string. Root cause: expansion of a wildcard sequence in FTP handling leads to DoS. Exploitation details are not provided in the documents. Mitigation: ...

CVE-2001-0334

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded...

CVE-2001-0335

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters...

Microsoft IIS FTP service searches all trusted domains for user accounts

Overview The Microsoft IIS FTP Service contains a vulnerability that allows remote attackers to log in using domain accounts without providing a specific domain name. Description The Microsoft IIS FTP Service allows users to establish connections using either local accounts or Windows domain...

CVE-2001-0334

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded...

CVE-2001-0335

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters...

CVE-2001-1428

The 1 FTP and 2 Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access...

BSD Based FTP Server Multiple glob Function Remote Overflow

It was possible to make the remote FTP server crash by creating a huge directory structure and then attempting to list list it using wildcards. This is usually known as the 'ftp glob overflow' attack. It may be possible to exploit this to execute arbitrary code. C Tenable Network Security, Inc...

inetd DoS exploit

Name: inetd DoS exploit Author: SeregaLinux ser@ihg prog$ ./pscaner -h 127.0.0.1 / it's my port scaner / Open ports on 127.0.0.1 ----------------------------- 21 OPEN : 220 ihg.localhost FTP server Version wu-6.6.65 Sat Feb 17 15:10:44 MSK 2001 ready. 23 OPEN : 25 OPEN : 220 ihg.localhost ESMTP...

CVE-2000-1062

Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service...

bftpd NLST Command Output Format String

The remote FTP server, which appears to be Bftpd, has a format string vulnerability in the NLST command. A remote attacker could use this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderso...

AnalogX Proxy Server Buffer Overflow Vulnerability

From "zer0-logic" [email protected]: Network Security Solutions Inc. Security Advisory Philippine based Security Company Http://www.nssolution.net Http://connect.to/nssi AnalogX Proxy Server DoS/Buffer Overflow Vulnerabilty Author: Abraham Lincoln H. Handle: zer0logic Email :...

CVE-2000-1062

CVE-2000-1062 describes a buffer overflow in the FTP service of HP JetDirect printer card firmware (versions x.08.20 and earlier). The vulnerability may allow remote attackers to cause a denial of service. Affected component is the FTP service within the JetDirect firmware; root cause is a buffer...

analogx-4.10.dos.txt

Network Security Solutions Inc. Security Advisory Philippine based Security Company Http://www.Nssolution.net Http://connect.to/nssi AnalogX Proxy Server DoS/Buffer Overflow Vulnerabilty Author: Abraham Lincoln H. Handle: zer0logic Email : [email protected], [email protected]...

AnalogX Proxy 4.0 4 - Denial of Service

// source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilities that can allow an attacker to crash th...

AnalogX Proxy 4.0 4 - Denial of Service

AnalogX Proxy 4.0 4 - Denial of Service // source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilitie...