CVE-2006-6240

Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to list contents of arbitrary directories and download arbitrary files via a .. dot dot sequence in an FTP command argument, as demonstrated by RETR GET or STOR PUT. NOTE: The provenance of th...

CVE-2006-6241

Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to cause a denial of service crash via consecutive RETR commands. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

NetBSD FTPd / tnftpd (NLST) Remote Stack Overflow PoC

No description provided by source. !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional BSD ftpd, including per-class configuration directives via ftpd.conf5, RFC 2389 and...

Re: [Full-disclosure] NetBSD FTPD and ports ***REMOTE ROOOOOT HOLE***

I can confirm that this bug is present on OSX 10.3.9 at the very least. lukemftpd-20040810 is the version this was tested against. I am fairly sure that this issue was patched recently in: Security Update 2006-003 FTPServer CVE-ID: CVE-2006-1445 Available for: Mac OS X v10.3.9, Mac OS X Server...

Telnet-FTP Server目录遍历及远程拒绝服务漏洞

Telnet-Ftp Server是一款Windows平台上的多用户Telnet/Ftp服务器。 Telnet-Ftp Server的GET和PUT等命令的处理过程中存在输入验证错误，允许攻击者通过目录遍历攻击列出并下载FTP根目录外的任意文件。 此外，攻击者还可以通过发送两个连续的RETR命令导致服务崩溃。 Sorin Chitu Telnet-FTP Server 1.0 build 1.250 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://slimbyte.sufx.net/...

CVE-2006-4403

The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when a login failure occurs with a valid user name, which allows remote attackers to cause a denial of service crash and enumerate valid usernames...

CVE-2006-4403

The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when a login failure occurs with a valid user name, which allows remote attackers to cause a denial of service crash and enumerate valid usernames...

CVE-2006-4403

CVE-2006-4403 affects Apple Mac OS X FTP daemon (ftpd) on Mac OS X 10.4.x/10.3.x with FTP Access enabled. The issue: when authenticating a valid user, a login failure can crash ftpd, enabling remote attackers to cause a denial-of-service and enumerate valid usernames. This is documented in the NV...

NetBSD FTPd / tnftpd Remote Stack Overflow PoC

No description provided by source. !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional BSD ftpd, including per-class configuration directives via ftpd.conf5, RFC 2389 and...

CVE-2006-5981

Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the 1 DIR LIST or NLST, 2 GET RETR, and 3 PUT STOR...

CVE-2006-5982

SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5982

Affected software: SeleniumServer FTP Server 1.0 (and possibly earlier). Vulnerability: passwords are stored in plaintext in the Servers directory, enabling credential disclosure by reading the file. Impact: attacker could obtain user passwords directly from the server files; CVSS indicates high ...

CVE-2006-5981

CVE-2006-5981 affects SeleniumServer FTP Server 1.0 (and possibly earlier). The vulnerability consists of multiple directory-traversal flaws that enable remote attackers to list directories, read arbitrary files, and upload files via traversal in the DIR (LIST or NLST), GET (RETR), and PUT (STOR)...

CVE-2006-5982

SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5981

Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the 1 DIR LIST or NLST, 2 GET RETR, and 3 PUT STOR...

[SECURITY] [DSA 1217-1] New linux-ftpd packages fix access control bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1217-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20th, 2006 http://www.debian.org/security/faq -...

GLSA-200611-05 : Netkit FTP Server: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200611-05 Netkit FTP Server: Privilege escalation Paul Szabo reported that an incorrect seteuid call after the chdir function can allow an attacker to access a normally forbidden directory, in some very particular circumstances, f...

CVE-2006-5950

Unspecified vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, probably due to response messages. NOTE: the provenance of this information is unknown; details...

CVE-2006-5949

Directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote attackers to create arbitrary directories via directory traversal sequences in a MKD request. NOTE: the provenance of this information is unknown; details are obtained from third party...

CVE-2006-5947

Multiple directory traversal vulnerabilities in Conxint FTP Server 2.2.0603, and possibly earlier, allow remote attackers to read arbitrary files and list arbitrary directories via directory traversal sequences in 1 DIR LIST or NLST and 2 GET RETR commands. NOTE: the provenance of this informatio...