CVE-2014-1693

Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the 1 user, 2 account, 3 cd, 4 ls, 5 nlist, 6 rename, 7 delete, 8 mkdir, 9 rmdir, 10 recv, 11 recvbin, 12 recvchunkstart, 13 send...

WFTPD Pro 3.30 Multiple Command Remote Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/33426/info WFTPD Pro is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle specially crafted FTP commands in a proper manner. Attackers can exploit these issues to crash the...

Orenosv HTTP/FTP Server 0.8.1 FTP Commands Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13546/info The FTP server shipped with Orenosv HTTP/FTP is prone to a remote buffer-overflow vulnerability. This issue presents itself when the application handles excessive values supplied as filenames through various FT...

Sysax Multi Server 4.3 - Remote Arbitrary Delete Files Exploit

No description provided by source. / Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FTP DELE requests. Thi...

KDE FTP KIOSlave URI Arbitrary FTP Server Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application to properly sanitize...

PlatinumFTPServer 1.0.6 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6492/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possible for a remote...

Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit

No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...

Command injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors...

Fedora 16 : proftpd-1.3.4b-5.fc16 (2013-0468)

Jann Horn reported that there is a possible race condition in the handling of the MKD/XMKD FTP commands, when the UserOwner directive is involved, and the attacker is on the same physical machine as a running proftpd. This race applies to modsftp and the handling of the MKDIR SFTP request as well...

Stack overflow

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the 1 USER, 2 PASS, 3 REIN, 4 QUIT, 5 PORT, 6 PASV, 7 TYPE, 8 STRU, 9 MODE, 10 RETR, 11 STOR, 12 APPE, 13 ALLO, 14 REST, 15 RNFR, 16 RNTO, 17 ABOR, 18 DELE, 19 CWD, 20 LIST, ...

GLSA-201110-25 : Pure-FTPd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-25 Pure-FTPd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pure-FTPd. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to...

CVE-2011-1526

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications aka krb5-appl 1.0.1 and earlier does not check the krb5setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP...

CVE-2011-1526

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications aka krb5-appl 1.0.1 and earlier does not check the krb5setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP...

CVE-2011-1526

The CVE-2011-1526 issue affects MIT Kerberos Version 5 Applications (krb5-appl) ftpd.c: it does not check the krb5_setegid return value, enabling remote authenticated users to bypass group restrictions and perform create/overwrite/delete/read of files via FTP. The vulnerability is reported in con...

CVE-2010-4756

The glob implementation in the GNU C Library aka glibc or libc6 allows remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a differen...

FtpDisc 1.0 Directory Traversal

Exploit Title: FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight Software Link: http://itunes.apple.com/kr/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory...

WinTFTP Server Pro 3.1 Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,tftp Transfers files to and from a remote computer running the TFTP service. TFTP -i host GET | PUT source destination -i Specifies binary image transfer mode also called octet. In binary image mode the file is moved...

Synology Disk Station crossite scripting

Crossite scripting on FTP commands logging...

Open-FTPD Authentication Bypass Vulnerability

This host is running Open&Compact FTP Server Open-FTPD and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: gbopenftpdauthbypassvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Open-FTPD Authentication Bypass Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010...

CVE-2009-4790

Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...