CVE-2009-3655

Rhino Software Serv-U versions 7.0.0.1 through 8.2.0.3 are documented to allow remote denial-of-service (server crash) through the FTP command sequence involving SITE SET TRANSFERPROGRESS ON. This is described in multiple sources (e.g., NVD and OpenVAS plugins) as a DoS vulnerability affecting Se...

Apache < 2.2.14 Multiple Vulnerabilities

Binary data 5196.prm...

CVE-2009-3095

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Apache Httpd < 2.2.14 : mod_proxy_ftp FTP command injection

A flaw was found in the modproxyftp module. In a reverse proxy configuration, a remote attacker could use this flaw to bypass intended access restrictions by creating a carefully-crafted HTTP Authorization header, allowing the attacker to send arbitrary commands to the FTP server...

Cerberus FTP 3.0.1 (ALLO) Remote Overflow DoS Exploit (meta)

Exploit for unknown platform in category dos / poc ============================================================ Cerberus FTP 3.0.1 ALLO Remote Overflow DoS Exploit meta ============================================================ Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Perception LiteServe 'USER' FTP命令远程缓冲区溢出漏洞

BUGTRAQ ID: 33158 CNCAN ID：CNCAN-2009010808 Perception LiteServe是一款FTP服务程序。 Perception LiteServe不正确处理'USER' FTP命令，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交包含超长字符串的'USER'命令，可触发缓冲区溢出，造成服务崩溃，或者以应用程序权限执行任意指令。 Perception LiteServe 2.2 Perception LiteServe 2.0.1 Perception LiteServe 2.0 2 Perception LiteServe 2.0...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

Debian Security Advisory DSA 1222-1 (proftpd)

The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...

Debian Security Advisory DSA 1222-1 (proftpd)

The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...

[SECURITY] [DSA 1296-1] New php4 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1296-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 21st, 2007 http://www.debian.org/security/faq -...

php CRLF injection

CRLF injection vulnerability in the ftpputcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands...

Stack overflow

Multiple stack-based buffer overflows in High Performance Anonymous FTP Server hpaftpd 1.01 allow remote attackers to execute arbitrary code via long arguments to the 1 USER, 2 PASS, 3 CWD, 4 MKD, 5 RMD, 6 DELE, 7 RNFR, or 8 RNTO FTP command...

CVE-2007-1731

CVE-2007-1731 affects High Performance Anonymous FTP Server (hpaftpd) 1.01. The vulnerability arises from multiple stack-based buffer overflows when processing long arguments to the FTP commands: USER, PASS, CWD, MKD, RMD, DELE, RNFR, and RNTO. This could allow remote attackers to execute arbitra...

warftp-1.txt

!/usr/bin/python Remote exploit for WarFTP 1.65. Tested on Windows 2000 server SP4 inside VMware. A trivially exploitable stack overflow is present in WarFTP which can be triggered by sending a long username 480 bytes along with the USER ftp command. Maybe other commands like PASS might also be...

CVE-2007-0428

Unspecified vulnerability in the chtbllookup function in hash.c for WzdFTPD 8.0 and earlier allows remote attackers to cause a denial of service via a crafted FTP command, probably due to a NULL pointer dereference...

To solve the Telnet invasion in the FTP space to store the Trojan-vulnerability warning-the black bar safety net

Himself a rookie, a lot of noobs like me, learn the 1 3 5-port scan the Administrator of the air interface of the token, and then use the Recton open the other Telnet of 2 3 port for the invasion. Learn this tutorial, find free FTP is very strenuous. I also got a poison, restore a backup, and now...

XM Ease Personal FTP Server format string vulnerability

Format string vulnerability in FTP command...

CVE-2006-6240

The CVE-2006-6240 issue affects Sorin Chitu Telnet-FTP Server 1.0 and is a directory traversal vulnerability in FTP command arguments (e.g., RETR/STOR). It allows remote authenticated users to list arbitrary directories and download arbitrary files by using dot-dot sequences. The OpenVAS entry in...