GlobalSCAPE Secure FTP Server Input Overflow

This module exploits a buffer overflow in the GlobalSCAPE Secure FTP Server. All versions prior to 3.0.3 are affected by this flaw. A valid user account or anonymous access is required for this exploit to work. This module requires Metasploit: https://metasploit.com/download Current source:...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

CVE-2003-1259

CVE-2003-1259 is a buffer overflow in CuteFTP 4.2 and 5.0 that allows remote attackers to crash the application and potentially execute arbitrary code via a long FTP server banner. The issue affects CuteFTP client versions 4.2/5.0 and is triggered by handling an excessively long FTP banner, leadi...

GLSA-200511-11 : linux-ftpd-ssl: Remote buffer overflow

The remote host is affected by the vulnerability described in GLSA-200511-11 linux-ftpd-ssl: Remote buffer overflow A buffer overflow vulnerability has been found in the linux-ftpd-ssl package. A command that generates an excessively long response from the server may overrun a stack buffer. Impac...

linux-ftpd-ssl: Remote buffer overflow

Background linux-ftpd-ssl is the netkit FTP server with encryption support. Description A buffer overflow vulnerability has been found in the linux-ftpd-ssl package. A command that generates an excessively long response from the server may overrun a stack buffer. Impact An attacker that has...

FileZilla FTP Server buffer overflow

Buffer overflow on oversized FTP USER command...

Serv-U FTP Server DoS

No description provided...

[SA17409] Serv-U FTP Server Potential Denial of Service Vulnerability

TITLE: Serv-U FTP Server Potential Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17409 VERIFY ADVISORY: http://secunia.com/advisories/17409/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Serv-U FTP Server 6.x http://secunia.com/product/5878/ DESCRIPTION: A...

WzdFTPD <= 0.5.4 (SITE) Remote Command Execution Exploit (meta)

No description provided by source. Reference: http://www.milw0rm.com/id.php?id=1231 kcope /str0ke Metasploit plugin for: Wzdftpd SITE Command Arbitrary Command Execution 2005 11 26 - David Maciejak package Msf::Exploit::wzdftpdsite; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced...

WzdFTPD 0.5.4 - 'SITE' Remote Command Execution (Metasploit)

Reference: http://www.milw0rm.com/id.php?id=1231 https://www.exploit-db.com/exploits/1231/ kcope /str0ke Metasploit plugin for: Wzdftpd SITE Command Arbitrary Command Execution 2005 11 26 - David Maciejak package Msf::Exploit::wzdftpdsite; use base "Msf::Exploit"; use strict; use Pex::Text; my...

GlobalSCAPE Secure FTP Server User Input Overflow

The remote host is running GlobalSCAPE Secure FTP Server. GlobalSCAPE Secure FTP Server 3.0.2 and prior versions are affected by a buffer overflow due to mishandling the user-supplied input. An attacker would first need to authenticate to the server before they can execute arbitrary commands...

NiteServer FTP directory traversal

The remote FTP server allows anybody to switch to the root directory and read potentialy sensitive files. OpenVAS Vulnerability Test $Id: niteserverftpdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: NiteServer FTP directory traversal Authors: Michel Arboi Copyright: Copyright C 2003...

Platinum FTP Server

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server: The 'dir' command can be used to examine the filesystem of the machine and gather further information about the hos...

Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

ArGoSoft FTP Server XCWD Overflow

The remote host is running the ArGoSoft FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

WS FTP Server Session Hijacking Vulnerability (Nov 2005)

WSFTP server is prone to session hijacking during passive connections and to a FTP bounce attack when a user submits a specially crafted FTP command. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Hummingbird Connectivity FTP service XCWD Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and ar...

Flash FTP Server Directory Traversal Vulnerability

Flash FTP Server easy-to-set-up FTP server for all Windows platforms. Some bugs were found that will allow a malicious user to write and read anywhere on the disk. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Serv-U FTP Server SITE CHMOD Command Stack Overflow Vulnerability

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the SITE CHMOD requests. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WS FTP Server DoS Vulnerability (Nov 2005)

WSFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...