6380 matches found
CVE-2004-2082
The CVE-2004-2082 entry describes a DoS in Sami FTP Server 1.1.3: remote authenticated users can crash pmsystem.exe by sending a GET request with a large number of leading “/” characters. This is the explicit vulnerability detail available in the records. No remediation or fix is provided in the ...
CVE-2003-1205
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...
CVE-2004-2082
The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service pmsystem.exe crash via a GET request wit a large number of leading "/" slash characters...
CVE-2003-1207
CVE-2003-1207 affects Crob FTP Server 3.5.1. Remote authenticated users can cause a denial-of-service (crash) by issuing a dir command that contains a large sequence of "." characters followed by the string "/*". The available sources reiterate this vulnerability but do not provide additional exp...
CVE-2003-1205
CVE-2003-1205 affects Crob FTP Server 2.60.1. Affected component: the FTP server’s file-rename handling. Root cause: remote authenticated users can trigger a denial of service (crash) by renaming a file to the MS-DOS device name “con.” Impact: DoS via crash; no other impacts described in the prov...
CVE-2005-1666
Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the 1 ftpxlatepath, 2 ftpiscanonical, or 3...
CVE-2005-1646
The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of...
Fastream NETFile Web / FTP server ftp bounce attack
It's possible to use FTP to bounce data to third party...
CVE-2005-1484
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...
CVE-2005-1485
Golden FTP Server Pro 2.52 is affected by an information-disclosure vulnerability: when a GET request targets a non-existent file, the FTP error response reveals the absolute path of the server. This is a server-side path disclosure issue that can aid an attacker in mapping the environment. The p...
CVE-2005-1484
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...
CVE-2005-1485
Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...
CVE-2005-1484
Golden FTP Server Pro 2.52 is vulnerable to a directory traversal flaw where a GET request containing a "\.." sequence prefixed by a """ can read files outside the share. Root cause is improper handling of backslash-dot-dot traversal, enabling reading of arbitrary files with partial confidentiali...
CVE-2005-1485
Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...
RaidenFTPD Multiple Command Traversal Arbitrary File Access
The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability. An authenticated attacker could exploit this to read and write arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description...
RaidenFTPD urlget Command Traversal Arbitrary File Access
The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability that could allow an attacker to read arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18225; scriptversion"1.18"...
CVE-2004-1783
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. slash dot dot...
CVE-2004-1783
CVE-2004-1783 refers to a directory traversal vulnerability in Net2Soft Flash FTP Server 1.0. Multiple connected sources (OpenVAS and RH/Red Hat metadata) confirm that a remote attacker can abuse a /.. path to read and create arbitrary files on affected systems, indicating potential impact on con...
CVE-2004-2037
CVE-2004-2037 describes a buffer overflow in Mollensoft Lightweight FTP Server 3.6. The flaw allows remote authenticated users to crash the server and potentially execute arbitrary code by sending a long CWD command (e.g., via an interactive FTP client). Documents identify the affected product an...