Easy FTP Server 1.7.0.11 MKD Buffer Overflow

!/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print """ Easy FTP Server v1.7.0.11 MKD Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com http://ipositivesecurity.blogspot.com """ if...

AIX5l with FTP-Server Remote Root Hash Disclosure Exploit

Exploit for linux platform in category remote exploits ========================================================= AIX5l with FTP-Server Remote Root Hash Disclosure Exploit ========================================================= AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH...

Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================ Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit Post Auth ================================================================================...

Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================ Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit Post Auth ================================================================================...

Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================= Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit Post Auth...

Power/Personal FTP Server Denial Of Service

!/usr/bin/python -------------------------------------------- Power/Personal FTP Server RETR Command DoS -------------------------------------------- Title: Power/Personat FTP Server RETR Command DoS Author: antrhacks Software Link: http://www.cooolsoft.com/download/PowerFTP.EXE Version: 2.30...

Power/Personal FTP Server - RETR Denial of Service

!/usr/bin/python -------------------------------------------- Power/Personal FTP Server RETR Command DoS -------------------------------------------- Title: Power/Personat FTP Server RETR Command DoS Author: antrhacks Software Link: http://www.cooolsoft.com/download/PowerFTP.EXE Version: 2.30...

Open-FTPD Authentication Bypass Vulnerability

Open&Compact FTP Server Open-FTPD is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PowerPersonal FTP Server - RETR Denial of Service

PowerPersonal FTP Server - RETR Denial of Service !/usr/bin/python -------------------------------------------- Power/Personal FTP Server RETR Command DoS -------------------------------------------- Title: Power/Personat FTP Server RETR Command DoS Author: antrhacks Software Link:...

CVE-2010-2695

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...

Directory traversal

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...

CVE-2010-2695

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...

CVE-2010-2695

Xlight FTP Server 3.x is affected by a directory traversal vulnerability in the SFTP/SSH2 virtual server. Versions 3.5.0 and 3.5.5 (and possibly others) before 3.6 allow remote authenticated users to read, overwrite, or delete arbitrary files by crafting .. sequences in commands such as ls, rm, r...

Wing FTP Server < 3.5.1 XSS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.5.1. The web server included with such versions is affected by a cross-site scripting vulnerability. By sending a specially crafted 'POST' request to the admin web interface, an authenticated, remote...

Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable; other...

Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

XLight FTP Server 3.x SFTP Directory Traversal

According to its SSH banner, the version of XLight FTP server listening on the remote host is potentially affected by a directory traversal vulnerability in its SFTP service. A remote, authenticated attacker, exploiting this flaw, can read and modify arbitrary files on the remote host. Note that...

Xlight FTP Server 3.5.5 Directory Traversal

Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get...

CVE-2004-2769

Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the 1 MLSD or 2 MLST commands...

CVE-2010-2620

Open&Compact FTP Server Open-FTPD 1.2 and earlier allows remote attackers to bypass authentication by sending 1 LIST, 2 RETR, 3 STOR, or other commands without performing the required login steps first...