BulletProof FTP Server privilege escalation

Privilege escalation with help subsystem...

Privilege escalation in BulletProof FTP Server v2.4.0.31

Summary: Privilege escalation in BulletProof FTP Server v2.4.0.31 http://www.bpftpserver.com/ Details: When the BPFTPServer service is installed and running as LocalSystem it is possible to manipulate the administrative interface and escalate privileges to that of the LocalSystem account...

Golden FTP Server Pro <= 2.52 (USER) Remote Buffer Overflow Exploit

No description provided by source. ===== Start GoldenFTPServerOverflow.pl ===== Usage: GoldenFTPServerOverflow.pl ip GoldenFTPServerOverflow.pl 127.0.0.1 KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 Download: http://www.goldenftpserver.com/ use IO::Socket; use strict; my$socket = ""; i...

Golden FTP Server Pro 2.52 - USER Remote Buffer Overflow

Golden FTP Server Pro 2.52 - USER Remote Buffer Overflow ===== Start GoldenFTPServerOverflow.pl ===== Usage: GoldenFTPServerOverflow.pl GoldenFTPServerOverflow.pl 127.0.0.1 KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 Download: http://www.goldenftpserver.com/ use IO::Socket; use strict...

Golden FTP Server Pro <= 2.52 (USER) Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc =================================================================== Golden FTP Server Pro GoldenFTPServerOverflow.pl 127.0.0.1 KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 Download: http://www.goldenftpserver.com/ use IO::Socket; use...

Golden FTP Server Pro 2.52 - 'USER' Remote Buffer Overflow

===== Start GoldenFTPServerOverflow.pl ===== Usage: GoldenFTPServerOverflow.pl GoldenFTPServerOverflow.pl 127.0.0.1 KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 Download: http://www.goldenftpserver.com/ use IO::Socket; use strict; my$socket = ""; if $socket = IO::Socket::INET-newPeerAd...

NetTerm FTP Server USER Command Remote Overflow

Binary data 2861.prm...

Intersoft NetTerm Netftpd USER Command Remote Overflow

The remote server is running NetTerm Netftpd server. There is a buffer overflow condition in the remote version of this software. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of the FTP server. C Tenable Network Security, Inc. include...

CVE-2005-1238

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

CVE-2005-1241

CVE-2005-1241 describes a directory traversal in the Powertech third‑party tool used with the iSeries AS/400 FTP server, enabling remote access to arbitrary files (including those in qsys.lib) via ".." in GET requests. The initial and connected records present no explicit patch or version details...

CVE-2005-1240

The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...

CVE-2005-1239

CVE-2005-1239 describes a directory-traversal flaw in Raz‑Lee’s third‑party tool used with the iSeries (AS/400) FTP server. The vulnerability allows remote attackers to access arbitrary files, including those in qsys.lib, by sending crafted "." sequences in a GET request. Publicly available refer...

CVE-2005-1242

Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

CVE-2005-1240

Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

CVE-2005-1241

Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

CVE-2005-1238

CVE-2005-1238 affects the built-in FTP server for IBM iSeries AS/400 systems. The root cause is failure to enforce a restricted document root, enabling an attacker to read or write arbitrary files, including sensitive QSYS databases, by sending a full pathname in a GET or PUT request. Impact per ...

CVE-2005-1243

CVE-2005-1243 describes a directory traversal vulnerability in a third‑party SafeStone tool used to secure the iSeries AS/400 FTP server. The issue allows remote attackers to access arbitrary files (including those under qsys.lib) via ".." sequences in a GET request, due to a canonicalization/pat...

CVE-2005-1243

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

CVE-2005-1239

Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

CVE-2005-1242

The CVE-2005-1242 entry describes a directory traversal vulnerability in the third‑party Bsafe tool used to secure the iSeries AS/400 FTP server. The flaw allows remote attackers to access arbitrary files, including those in qsys.lib, by using ".." sequences in a GET request. Affected software is...