CVE-2009-4006

CVE-2009-4006 documents a remote stack-based buffer overflow in the RhinoSoft Serv-U FTP server’s TEA decoding algorithm. Affected versions include 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0. The vulnerability allows an attacker to execute arbitrary code by sending a long hexadecimal str...

RhinoSoft Serv-U FTP Server TEA Decoder Remote Stack Buffer Overflow Vulnerability

RhinoSoft Serv-U FTP Server is prone to a remote stack-based buffer- overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed...

RhinoSoft Serv-U FTP Server TEA Decoder Remote Stack Buffer Overflow Vulnerability

RhinoSoft Serv-U FTP Server is prone to a remote stack-based buffer- overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

[SECURITY] Fedora 10 Update: proftpd-1.3.2b-1.fc10

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 11 Update: proftpd-1.3.2b-1.fc11

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Home FTP Server 'SITE INDEX' Command Remote Denial of Service Vulnerability

Home FTP Server is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. OpenVAS Vulnerability Test $Id:...

Home FTP Server 1.10.1.139 Traversal

Date of Discovery: 17-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server is an easy use FTP server Application. Directory Traversal...

Home FTP Server 'MKD' Command Directory Traversal Vulnerability

Home FTP Server is prone to a directory traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

XM Easy Personal FTP Server 5.8.0 APPE / DELE Denial Of Service

Date of Discovery: 13-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server is an easy use FTP server Application. Denial of service vulnerability exists in XM Personal FTP...

Home FTP Server Denial Of Service

Date of Discovery: 16-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server FTP Server is an easy use FTP server Application. Denial of...

Home FTP Server 'SITE INDEX' Command Remote Denial of Service Vulnerability

Home FTP Server is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Home FTP Server multiple security vulnerabilities

Directory traversal on directory creation, DoS...

Home FTP Server 'MKD' Command Directory Traversal Vulnerability

Date of Discovery: 17-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server is an easy use FTP server Application. Directory Traversal...

Home FTP Server 'SITE INDEX' Command Remote Denial of Service Vulnerability

Date of Discovery: 16-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server FTP Server is an easy use FTP server Application. Denial of...

Home FTP Server - MKD Directory Traversal

Home FTP Server - MKD Directory Traversal !/usr/bin/python import socket import sys def Usage: print "Usage: ./expl.py \n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3 sock =...

XM Easy Personal FTP Server 5.8.0 Denial Of Service

Date of Discovery: 10-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server is a easy use FTP server Application. Denial of service vulnerability exists in XM Personal FTP...

Home FTP Server 'MKD' Command Directory Traversal Vulnerability

No description provided by source. !/usr/bin/python import socket import sys def Usage: print "Usage: ./expl.py servip Username password\n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3...

Home FTP Server - 'MKD' Directory Traversal

!/usr/bin/python import socket import sys def Usage: print "Usage: ./expl.py \n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3 sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try:...

XM Easy Personal FTP Server APPE和DELE命令远程拒绝服务漏洞

BUGTRAQ ID: 37016 XM Easy Personal FTP Server是一款简单易用的个人FTP服务器工具。 用户登录到XM Personal FTP Server后对一个套接字连接使用APPE命令而对另一个连接使用DELE命令就会导致服务器停止响应。 第一个套接字连接： 1.sock.connecthostname, 21 2.sock.send"user %s\r\n" %username 3.sock.send"pass %s\r\n" %passwd 4.sock.send"PORT 127,0,0,1,122,107\r\n" 5.sock.send"APP...

Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service

No description provided by source. Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP Server 1.10.1.139 Tested on:...