CVE-2005-2726

Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:" Windows drive letter sequences in commands such as 1 LIST or 2 RETR...

CVE-2005-2726

Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:" Windows drive letter sequences in commands such as 1 LIST or 2 RETR...

CVE-2005-2726

CVE-2005-2726 describes a directory traversal vulnerability in Home Ftp Server 1.0.7 that allows remote authenticated users to read arbitrary files by supplying Windows drive-letter paths such as “C:\” in commands like LIST or RETR. The condition is authenticated access; impact is partial disclos...

CVE-2005-2727

Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst...

CVE-2005-2727

CVE-2005-2727 affects Home Ftp Server 1.0.7. The issue arises because sensitive user and server information are stored in the same directory as the user’s home directory, enabling remote authenticated users to retrieve sensitive data by accessing ftpmembers.lst and ftpsettings.lst. The available ...

Multiple Vulnerabilities in Home Ftp Server 1.0.7

Donato Ferrante Application: Home Ftp Server http://downstairs.dnsalias.net/homeserver.html Version: 1.0.7 b45 Bugs: Multiple Vulnerabilities Date: 24-Aug-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

Home FTP Server directory traversal

It's possible to obtain any file from remote system...

Home FTP Server Multiple Vulnerabilities

The remote host appears to be running Home Ftp Server, an FTP server application for Windows. The installed version of Home Ftp Server by default lets authenticated users retrieve configuration files which contain, for example, the names and passwords of users defined to the application as well a...

CVE-2004-2309

CVE-2004-2309 affects Crob FTP Server 3.5.1. A directory traversal vulnerability allows local users to browse outside the FTP root via multiple ../ in the DIR command. According to NVD, the impact is partial confidentiality with local access and no authentication barriers; no exploitation details...

CVE-2004-2366

The CVE references a buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2. An attacker could trigger a denial of service (crash) by sending a SITE command with a long argument, constituting a remote exploit vector against the affected server. The root cause is the overflow condition...

CVE-2004-2366

Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service crash via a SITE command with a long argument...

CVE-2004-2309

Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ dot dot slash in the DIR command...

CVE-2005-2479

Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service application crash or CPU consumption via a long USER command...

CVE-2005-2479

CVE-2005-2479 affects Quick 'n Easy FTP Server 3.0. The OpenVAS entry and CVE references confirm a denial-of-service via a long USER command, enabling remote attackers to crash the application or cause CPU exhaustion. No vendor/version remediation or workaround is documented in the provided mater...

CVE-2005-2479

Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service application crash or CPU consumption via a long USER command...

quickDoS.txt

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities)

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

Quick 'n EasY 3.0 FTP Server - Remote Denial of Service

/ Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by: Kozan Credits to ATmaCA, matiteman Web:...

Quick n EasY 3.0 FTP Server - Remote Denial of Service

Quick n EasY 3.0 FTP Server - Remote Denial of Service / Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by...

ProFTPD < 1.3.0rc2 Multiple Remote Format Strings

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host suffers from multiple format string vulnerabilities, one involving the 'ftpshut' utility and the other in modsql's 'SQLShowInfo' directive...