6448 matches found
Authentication flaw
Open&Compact FTP Server Open-FTPD 1.2 and earlier allows remote attackers to bypass authentication by sending 1 LIST, 2 RETR, 3 STOR, or other commands without performing the required login steps first...
CVE-2004-2769
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the 1 MLSD or 2 MLST commands...
Titan FTP Server 'XCRC' and 'COMB' Directory Traversal Vulnerabilities
This host is running Titan FTP Server and is prone to directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtitanftpserverdirtravvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Titan FTP Server 'XCRC' and 'COMB' Directory Traversal Vulnerabilities Authors: Madhuri D Copyright:...
Cerberus FTP Server MLSD and MLST Command Hidden Files Security Bypass
The version of Cerberus FTP server on the remote host is earlier than 4.0.3.0. Such versions are potentially affected by a security bypass vulnerability. The 'MLSD' and 'MLST' commands list hidden files despite the 'Display hidden files' option being disabled. A remote attacker, possibly...
Titan FTP Server < 8.30.1231 Directory Traversal Vulnerabilities
Titan FTP Server is prone to directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 13 : krb5-1.7.1-7.fc13 (2010-4608)
A GSSAPI-authenticated service could be remotely forced to trigger an assertion failure by sending it certain invalid messages MITKRB5-SA-2010-002, CVE-2010-0628. The included patch for adding PAM support to the bundled FTP server contained a bug which would cause the service to crash if a client...
Fedora 12 : krb5-1.7.1-6.fc12 (2010-4677)
A GSSAPI-authenticated service could be remotely forced to trigger an assertion failure by sending it certain invalid messages MITKRB5-SA-2010-002, CVE-2010-0628. The included patch for adding PAM support to the bundled FTP server contained a bug which would cause the service to crash if a client...
CVE-2010-2467
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests...
Default credentials
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests...
CVE-2010-2467
CVE-2010-2467 affects the S2 Security NetBox (likely 2.x–3.x) used in Linear eMerge 50/5000 and Sonitrol eAccess. The FTP server storing database backups does not require a password, enabling remote download of backups via FTP requests. Exploitation details are not provided in the connected docum...
CVE-2010-2467
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests...
CVE-2010-2428
Cross-site scripting XSS vulnerability in adminloginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request...
CVE-2010-2428
CVE-2010-2428 affects Wing FTP Server for Windows 3.5.0 and earlier; the admin_loginok.html page is vulnerable to cross-site scripting via a crafted POST, allowing an authenticated remote attacker to inject arbitrary script/HTML in the user’s browser. Several sources (NVD, OpenVAS, Nessus) corrob...
CVE-2010-2425
CVE-2010-2425 affects South River Technologies Titan FTP Server 8.10.1125 and earlier, with a directory traversal flaw in COMB command due to improper handling of ..// sequences that allows remote authenticated users to read or delete arbitrary files. OpenVAS entries classify Titan FTP Server
Wing FTP Server DoS
Crash on PORT command parsing...
Wing FTP Server <= 3.1.2 'PORT' Command DoS Vulnerability
Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Sysax Multi Server "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities
Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform: Windows Type of Vulnerability: Buffer overflow --DoS Risk rating: Medium Date of...
Wing FTP Server PORT命令远程拒绝服务漏洞
BUGTRAQ ID: 41015 Wing FTP server是安全的多协议文件服务器。 远程攻击者可以通过向Wing FTP Server提交带有无效参数的PORT命令导致服务器崩溃。 Wing FTP Server 3.1.2 厂商补丁： wftpserver.com -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wftpserver.com/serverhistory.htm...
Wing FTP Server PORT Command DoS Vulnerability
Discovery Date: Nov 14, 2009 Risk: Important Affected Software: Wing FTP Server 3.1.2 Description: There is a Denial of Service DoS vulnerability that exists in Wing FTP Server 3.1.2. The said vulnerability can be exploited by using an invalid parameter for PORT command. When exploited...
BolinTech DreamFTP Server 1.02 - Format String (Metasploit)
$Id: dreamftpformat.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...