FTP Voyager 15.2.0.11 Directory Traversal

Vulnerability ID: HTB22625 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpvoyager.html Product: FTP Voyager Vendor: Rhino Software http://www.ftpvoyager.com/ Vulnerable Version: 15.2.0.11 and Probably Prior Versions Vendor Notification: 22 September 2010...

MS09-053 Microsoft IIS FTP Server NLST Response Overflow

This module exploits a stack buffer overflow flaw in the Microsoft IIS FTP service. The flaw is triggered when a special NLST argument is passed while the session has changed into a long directory path. For this exploit to work, the FTP server must be configured to allow write access to the file...

GlobalScape Secure FTP Server - Input Overflow (Metasploit)

$Id: globalscapeftpinput.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

NetTerm NetFTPD - 'USER' Remote Buffer Overflow (Metasploit)

$Id: nettermnetftpduser.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2453

Multiple cross-site scripting XSS vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted 1 USER or 2 PASS command, which is written by the FTP logging module to a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted 1 USER or 2 PASS command, which is written by the FTP logging module to a...

CVE-2010-2453

Multiple cross-site scripting XSS vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted 1 USER or 2 PASS command, which is written by the FTP logging module to a...

CVE-2010-2453

CVE-2010-2453 describes multiple cross-site scripting (XSS) vulnerabilities in Synology DiskStation 2.x, prior to DSM3.0-1337. The issue arises when an attacker uses the FTP server to trigger the FTP logging module to write crafted USER or PASS entries into a web-interface log window, enabling ar...

Directory Traversal Vulnerability in CrossFTP Pro

High-Tech Bridge SA Security Research Lab has discovered vulnerability in CrossFTP Pro which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in CrossFTP Pro: CVE-2010-4153 The vulnerability exists due to insufficient sanitation of the...

WebSTAR FTP Server - USER Overflow (Metasploit)

$Id: webstarftpuser.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Wing FTP Server < 3.6.6 HTTP Request DoS Vulnerability

Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wing FTP Server < 3.6.6 DoS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.6.6. Such versions reportedly fail to handle certain specially crafted HTTP requests. An attacker could exploit this issue to trigger a denial of service condition, and crash the remote service. C...

Nmap NSE: FTP Bounce

This script attempts to check if the FTP server allows port scanning using the FTP bounce method. This is a wrapper on the Nmap Security Scanner's http://nmap.org ftp-bounce.nse OpenVAS Vulnerability Test $Id: gbnmapftpbounce.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap FTP Bounce NSE...

Multiple Vulnerabilities in the IOS FTP Server

The Cisco IOS FTP Server feature contains multiple vulnerabilities that can result in a denial of service DoS condition, improper verification of user credentials, and the ability to retrieve or write any file from the device filesystem, including the device's saved configuration. This...

Один тип уязвимостей Питон программ

Один тип уязвимостей Питон программ. Авторы: prusle и djp. Неустойчивость к ошибкам библиотечных функций языка Си таких как stscpy, sprintf, strcat и многих других позволяет получать полный контроль над ОС, написанными на Си. Изобретательность хакеров проявилась в изобретении методов эксплуатации...

Serv-U Denial of Service and Security Bypass Vulnerabilities

Serv-U is prone to denial of service DoS and security-bypass vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-3187

Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command...

Serv-U Version Detection

Serv-U File Server, an FTP server is listening on this port, and it is possible to determine its version. Note that thorough tests may have to be enabled to retrieve the full version. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid48434; scriptversion"1.16";...

Serv-U < 10.2.0.0

According to its banner, the installed version of Serv-U is earlier than 10.2.0.0 and is, therefore, potentially affected by the following issues : - It is possible to create a directory, when using virtual paths and various combinations of permissions, where the end-user does not have permission...

FTPx Corp FTP Explorer Directory Traversal Vulnerability

This host is installed with FTPx Corp FTP Explorer and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodftpexploredirtraversalvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ FTPx Corp FTP Explorer Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...