Core FTP Server 1.2 build 535 (32-bi)t - Crash (PoC)

!/usr/bin/python import socket,sys,time def Usage: print "Core FTP Server Version 1.2, build 535, 32-bit - Crash P.O.C." print "Usage: ./coreftpdos.py " print "Ex: ./coreftpdos.py 192.168.10.10 21 ftp ftp\n" if lensys.argv 5: Usage sys.exit1 else: host=sys.argv1 port=sys.argv2 user=sys.argv3...

CVE-2013-4730

Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command...

Buffer overflow

Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command...

CVE-2013-4730

CVE-2013-4730 concerns PCMan’s FTP Server 2.0.7. The connected data confirm a buffer overflow in the FTP server’s command handling, enabling remote code execution via crafted inputs. Exploitation details point to the PUT and MKD commands as vectors, with public references showing Metasploit modul...

CVE-2013-4730

Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command...

CVE-2013-5655

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. dot dot in the default URI...

Directory traversal

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. dot dot in the default URI...

CVE-2013-5655

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. dot dot in the default URI...

CVE-2013-5655

CVE-2013-5655 describes a directory traversal vulnerability in the FTP server component of the YingZhi Python Programming Language for iOS 1.9. The issue allows remote attackers to read—and possibly write—arbitrary files via a .. (dot dot) in the default URI. Connected documents corroborate the a...

CVE-2014-1441

Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...

CVE-2014-1442

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

CVE-2014-1443

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

Directory traversal

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

Design/Logic Flaw

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

CVE-2014-1443

CVE-2014-1443 affects Core FTP Server 1.2 before build 515. Remote authenticated users can disclose the password of the previously logged-on user by sending a specially crafted USER command (length-specifically crafted string), likely due to an out-of-bounds/read-path issue. The impact is informa...

CVE-2014-1442

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

CVE-2014-1441

Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...

CVE-2014-1443

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

CVE-2014-1441

CVE-2014-1441 affects Core FTP Server 1.2 prior to build 515. A remote attacker can trigger a denial-of-service by sending a malformed AUTH SSL command, with the condition demonstrated by pressing Enter twice, causing a reachable assertion and server crash. Mitigation is to upgrade to Core FTP Se...

CVE-2014-1442

Core FTP Server 1.2 before build 515 is vulnerable to a Directory Traversal via the XCRC command. The flaw allows remote authenticated users to determine the existence of arbitrary files using a /../ sequence. Affected software: Core FTP Server (version 1.2 prior to build 515). Root cause: improp...