WS_FTP XCRC buffer overflow

Added: 09/22/2006 CVE: CVE-2006-4847 BID: 20076 OSVDB: 28939 Background WSFTP Server is an FTP server for Windows platforms. Problem Buffer overflows in multiple FTP commands allow an authenticated attacker to execute arbitrary commands. Resolution Upgrade to WSFTP Server 5.05 Hotfix 1. Reference...

Multiple Microsoft Internet Explorer security vulnerabilities

Crossite scripting, crossite information access, FTP commands injection. Vulnerabilities can be used for hidden malware installation...

CVE-2006-4313

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

CVE-2006-4313

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

FileCOPA FTP Server multiple buffer overflows

Multiple FTP commands buffer overflows...

SunFTP directory traversal

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT. OpenVAS Vulnerability Test $Id: sunftpdtraversal.nasl 6046 2017-04-28 09:02:54Z teissa $...

SlimFTPD buffer overflow

Buffer overflows in different FTP commands...

Crob FTP Server buffer overflow

Buffer overflow in different FTP commands...

CVE-2003-1206

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

CVE-2005-1666

Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the 1 ftpxlatepath, 2 ftpiscanonical, or 3...

CVE-2004-1641

Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service crash via a long FTP command such as 1 CWD, 2 STAT, or 3 LIST...

WinFTP FTP Server buffer overflows

Buffer overflows in different FTP commands...

CVE-2005-0419

CVE-2005-0419 concerns the 3Com 3CServer/3CDaemon FTP server family. The connected documents confirm multiple heap-based buffer overflows that allow remote authenticated users to execute arbitrary code by sending long FTP commands (demonstrated via the STAT command). The vulnerability affects the...

CVE-2005-0419

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command...

CVE-2004-1439

Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as 1 USER, 2 PASS, 3 RETR,4 CWD, 5 XMKD, and 6 XRMD...

CVE-2004-1136

Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service application crash via large replies to FTP commands...

DSA-631-1 kdelibs - unsanitised input

Bulletin has no description...

CVE-2004-1439

Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as 1 USER, 2 PASS, 3 RETR,4 CWD, 5 XMKD, and 6 XRMD...

CVE-2004-1166

CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline "%0a" before the FTP command, which causes the commands to be inserted into the resulting FTP...

CVE-2004-1165

CVE-2004-1165 affects Konqueror 3.3.1, where a crafted ftp:// URL containing a URL-encoded newline (%0a) can inject FTP commands (e.g., PORT) into the session. Exploitation would occur via remote interaction with the FTP handling code within Konqueror. Public advisories reference kdelibs/kdebase ...