CVE-2013-5655

CVE-2013-5655 describes a directory traversal vulnerability in the FTP server component of the YingZhi Python Programming Language for iOS 1.9. The issue allows remote attackers to read—and possibly write—arbitrary files via a .. (dot dot) in the default URI. Connected documents corroborate the a...

PT-2014-2940

Name of the Vulnerable Software and Affected Versions YingZhi Python Programming Language for iOS version 1.9 Description The issue allows remote attackers to potentially read and write arbitrary files due to a directory traversal vulnerability in the FTP server. This is achieved by using a .. do...

CVE-2013-5655: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. dot dot in the default URI...

CVE-2014-1443

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

CVE-2014-1441

Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...

CVE-2014-1442

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

Directory traversal

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

Design/Logic Flaw

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

CVE-2014-1441

Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...

CVE-2014-1442

Core FTP Server 1.2 before build 515 is vulnerable to a Directory Traversal via the XCRC command. The flaw allows remote authenticated users to determine the existence of arbitrary files using a /../ sequence. Affected software: Core FTP Server (version 1.2 prior to build 515). Root cause: improp...

CVE-2014-1441

CVE-2014-1441 affects Core FTP Server 1.2 prior to build 515. A remote attacker can trigger a denial-of-service by sending a malformed AUTH SSL command, with the condition demonstrated by pressing Enter twice, causing a reachable assertion and server crash. Mitigation is to upgrade to Core FTP Se...

CVE-2014-1443

CVE-2014-1443 affects Core FTP Server 1.2 before build 515. Remote authenticated users can disclose the password of the previously logged-on user by sending a specially crafted USER command (length-specifically crafted string), likely due to an out-of-bounds/read-path issue. The impact is informa...

CVE-2014-1442

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

CVE-2014-1443

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

PT-2014-4185

Name of the Vulnerable Software and Affected Versions Core FTP Server version 1.2 before build 515 Description The issue allows remote authenticated users to obtain sensitive information, specifically the password for the previous user, by sending a USER command with a specific length. This could...

PT-2014-4184

Name of the Vulnerable Software and Affected Versions Core FTP Server version 1.2 before build 515 Description A directory traversal issue allows remote authenticated users to determine the existence of arbitrary files by using a /../ sequence in an XCRC command. Recommendations For Core FTP Serv...

PT-2014-4183

Name of the Vulnerable Software and Affected Versions Core FTP Server version 1.2 before build 515 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via an AUTH SSL command with malformed data. This can be triggered by sending an AUTH SSL command wi...

CVE-2014-1441: Concurrent Execution using Shared Resource with Improper Synchronization

Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...

CVE-2014-1442: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...

CVE-2014-1443: Improper Restriction of Operations within the Bounds of a Memory Buffer

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...