6380 matches found
RaidenFTPd 2.4 - Unauthorized File Access
source: https://www.securityfocus.com/bid/13292/info RaidenFTPD is prone to a vulnerability that could allow unauthorized access to files outside the FTP root. The issue exists due to a lack of sufficient sanitization performed on 'SITE urlget' requests. Directory traversal sequences may be passe...
CVE-2005-1244
Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that...
CVE-2005-1240
Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2002-1354
Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...
CVE-2002-1354
The CVE-2002-1354 entry concerns a directory traversal vulnerability in TYPSoft FTP Server 0.99.8. The flaw allows local users to list contents of arbitrary directories by abusing the cd/CWD command (dot dot dot). Affected software: TYPSoft FTP Server 0.99.8. Root cause: improper handling of dire...
XAMPP Default FTP Account
The remote FTP server has an account with a known username / password combination that might have been configured when installing XAMPP. An attacker may be able to use this to gain authenticated access to the system, which could allow for other attacks against the affected application and host...
CVE-2005-1025
CVE-2005-1025 : The AS/400 4.3 FTP server, when running in IFS mode, is vulnerable to a symlink attack via RCMD and the ADDLNK utility, enabling remote attackers to obtain sensitive information from the QSYS.LIB library. The issue is documented with a MEDIUM severity (CVSS v2 base score 5.0). No ...
[SIG^2 G-TEC] SurgeFTP LEAK Command Denial-Of-Service Vulnerability
SIG^2 Vulnerability Research Advisory SurgeFTP LEAK Command Denial-Of-Service Vulnerability by Tan Chew Keong Release Date: 07 Apr 2005 ADVISORY URL http://www.security.org.sg/vuln/surgeftp22m1.html SUMMARY SurgeFTP http://netwinsite.com/surgeftp/ is an FTP server with SSL/TLS security, easy...
FreeBSD-SA-05:02.sendfile
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: syskern Announced: 2005-04-04 Credits: Sven...
ArGoSoft FTP Server <= 1.4.2.8 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ======================================================== ArGoSoft FTP Server = 1.4.2.8 Denial of Service Exploit ======================================================== / ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi"...
ArGoSoft FTP Server <= 1.4.2.8 Denial of Service Exploit
No description provided by source. / ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address : argosoft.com the bug...
ArGoSoft FTP Server 1.4.2.8 - Denial of Service
/ ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address : argosoft.com the bug was found by a mate and reported to...
ArGoSoft FTP Server 1.4.2.8 - Denial of Service
ArGoSoft FTP Server 1.4.2.8 - Denial of Service / ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address :...
mtftpd FTP server format string bug
Format string bug on syslog call...
CVE-2005-0847
Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections...
CVE-2005-0850
FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others...
CVE-2005-0850
Vulnerability summary (CVE-2005-0850): FileZilla FTP Server prior to 0.9.6 is susceptible to denial of service when a client requests a filename containing MS-DOS device names (e.g., CON, NUL, COM1, LPT1). The issue is confirmed in multiple security feeds, and related Nessus findings also describ...
CVE-2005-0851
FileZilla FTP server before 0.9.6, when using MODE Z zlib compression, allows remote attackers to cause a denial of service infinite loop via certain file uploads or directory listings...
CVE-2005-0847
CVE-2005-0847 affects Code Ocean FTP server 1.0; a flaw allows remote attackers to cause a denial of service via a large number of connections. The CVSS base score is 5.0 (Medium) with network attack vector, low complexity, no authentication, and partial availability impact. Exploit details are n...