wu-ftpd ls -W memory exhaustion

The FTP server does not filter arguments to the ls command. It is possible to consume all available memory on the machine by sending ls '-w 1000000 -C' See http://www.guninski.com/binls.html OpenVAS Vulnerability Test $Id: wuftpdlsDoS.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: wu-ftpd l...

GuildFTPd Directory Traversal

Version 0.97 of GuildFTPd was detected. A security vulnerability in this product allows anyone with a valid FTP login to read arbitrary files on the system. OpenVAS Vulnerability Test $Id: GuildFTPD097.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: GuildFTPd Directory Traversal Authors: Yoa...

BSD ftpd Single Byte Buffer Overflow

One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. OpenVAS Vulnerability Test $Id: ftpd1byteoverflow.nasl 6522 2017-07-04 15:22:28Z cfischer $ Description: BSD ftpd Single Byte Buffer Overflow Authors: Xue Yong Zhi Copyright:...

Serv-U FTP Server SITE CHMOD Command Stack Overflow Vulnerability

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the SITE CHMOD requests which may allow an attacker to trigger a buffer overflow against this server, which may allow him to disable this server remotely or to execute arbitrary code on this...

NiteServer / 121 WAM! FTP Directory Traversal Vulnerability

The remote FTP server allows anybody to switch to the root directory and read potentially sensitive files. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

EFTP < 2.0.8.348 Information Disclosure Vulnerability

The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Platinum FTP Server

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. SPDX-FileCopyrightText: 2003 Douglas Minderhout Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...

CVE-2005-3467

CVE-2005-3467 affects Serv-U FTP Server prior to 6.1.0.4. The vulnerability enables a denial-of-service (crash) via malformed packets and potentially other issues with unknown impact; a second vector involves the use of a tilde (~) in a pathname, and a third involves memory consumption of the dae...

Serv-U FTP Server < 6.1.0.4 Malformed Packet Remote DoS

Binary data 3277.prm...

Inicom networks ioFTPd FTP Server account enumeration

Error messages differ for existant and non-existant user account...

Critical Security Advisory #005: ioFTPd User account enumeration vulnerability

Inicom networks ioFTPd 0.5.84u User account enumeration vulnerability Critical Security research: http://www.critical.lt Original Advisory may be found: http://www.critical.lt/?vulnerabilities/119 Vulnerable product: ioFTPd 0.5.84u maybe prior versions affected too Vulnerability type: User accoun...

CVE-2004-2487

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via 1 "..", 2 ".." backslash dot dot, or 3 "/../" sequences in a RETR get, b NLST ls, c LIST ls, d RNFR, or e RNTO FTP commands...

CVE-2004-2488

The CVE-2004-2488 entry concerns Nexgen FTP Server prior to version 2.2.3.23. It describes a directory traversal vulnerability that allows remote authenticated users to read or list arbitrary files through “C:” sequences in the RETR, NLST, LIST, RNFR, and RNTO FTP commands. Affected software: Nex...

CVE-2004-2487

CVE-2004-2487 concerns Nexgen FTP Server before 2.2.3.23, where authenticated remote users can read or list arbitrary files via directory traversal sequences in FTP commands (RETR, NLST, LIST, RNFR, RNTO). Affected component is the FTP command handling in Nexgen server; root cause: traversal sequ...

CVE-2004-2532

CVE-2004-2532 affects the Serv-U FTP Server prior to version 5.1.0.0. The issue arises from a default administrator account and password that allow a local user to authenticate to the server, create a new user, log in as that user, and then issue a SITE EXEC command to execute arbitrary commands ...

CVE-2004-2532

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...

CVE-2004-2488

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via "C:" sequences in the 1 RETR get, 2 NLST ls, 3 LIST ls, 4 RNFR, or 5 RNTO FTP commands...

CVE-2004-2533

Serv-U FTP Server 4.1 possibly 4.0 allows remote attackers to cause a denial of service application crash via a SITE CHMOD command with a "\..." followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111...