6380 matches found
CVE-2004-2037
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client...
CVE-2004-1992
CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...
Orenosv HTTPFTP Server 0.8.1 - CGISSI.exe Remote Buffer Overflow (PoC)
Orenosv HTTPFTP Server 0.8.1 - CGISSI.exe Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/13549/info Orenosv HTTP/FTP server is prone to a remote buffer overflow vulnerability that affects 'cgissi.exe'. This issue presents itself when the application handles excessive values...
Orenosv HTTP/FTP Server 0.8.1 - 'CGISSI.exe' Remote Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/13549/info Orenosv HTTP/FTP server is prone to a remote buffer overflow vulnerability that affects 'cgissi.exe'. This issue presents itself when the application handles excessive values supplied through an SSI command name. A successful attack can result ...
Golden Ftp Server Pro - Directory Traversal Vuln
Product: Golden Ftp Server Pro Affected Versions : v2.52 Credit / Discovered by: Lachlan. H Date vendor notified: 02/05/2005 Patch Released: N/A Disclosure: 03/05/2005 External References: http://secunia.com/advisories/15175/ http://www.securityfocus.com/bid/13479/info/ Product Description: Golde...
Golden FTP Server Pro GET Traversal Arbitrary File Access
The version of Golden FTP Server installed on the remote host is prone to a directory traversal attack. Specifically, an attacker can read files located outside a share with '..' sequences subject to the privileges of the FTP server process. TRUSTED...
CVE-2005-1415
GlobalSCAPE Secure FTP Server (3.0.2 and earlier) is affected by a buffer overflow caused by mishandling user-supplied input, allowing remote code execution after sending a long FTP command. Some sources note that all versions prior to 3.0.3 are vulnerable; exploitation requires a valid user acco...
CVE-2005-1415
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command...
CVE-2005-1371
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges...
CVE-2005-1415
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command...
Directory Traversal Vuln - RaidenFTPD 2.4 < Build 2241
Product : RaidenFTPD Affected Versions : 2.4.2241 Author: Lachlan. H Date vendor notified: 19/04/2005 Patch released: 20/04/2005 Disclosure: 02/05/2005 Product Description: RaidenFTPD is an easy-to-use ftp server software for Windows™. With this handy tool you can share your files with friends,...
[NT] GlobalScape Secure FTP Server Arbitrary Command Overflow ( Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-0850
FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others...
CVE-2005-1371
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges...
CVE-2005-1371
Summary: CVE-2005-1371 affects BulletProof FTP Server (BPFTPServer) 2.4.0.31, where the BPFTPServer service does not properly drop privileges before opening files via the Help menu, enabling local users to gain privileges. Affected software/component: BulletProof FTP Server, BPFTPServer service, ...
CVE-2005-0851
FileZilla FTP server before 0.9.6, when using MODE Z zlib compression, allows remote attackers to cause a denial of service infinite loop via certain file uploads or directory listings...
CVE-2005-1238
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...
CVE-2005-1243
Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...