6456 matches found
Golden FTP Server Pro <= 2.52 (USER) Remote Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc =================================================================== Golden FTP Server Pro GoldenFTPServerOverflow.pl 127.0.0.1 KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 Download: http://www.goldenftpserver.com/ use IO::Socket; use...
Golden FTP Server Pro 2.52 - 'USER' Remote Buffer Overflow
===== Start GoldenFTPServerOverflow.pl ===== Usage: GoldenFTPServerOverflow.pl GoldenFTPServerOverflow.pl 127.0.0.1 KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 Download: http://www.goldenftpserver.com/ use IO::Socket; use strict; my$socket = ""; if $socket = IO::Socket::INET-newPeerAd...
NetTerm FTP Server USER Command Remote Overflow
Binary data 2861.prm...
Intersoft NetTerm Netftpd USER Command Remote Overflow
The remote server is running NetTerm Netftpd server. There is a buffer overflow condition in the remote version of this software. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of the FTP server. C Tenable Network Security, Inc. include...
CVE-2005-1238
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...
CVE-2005-1240
The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...
CVE-2005-1239
CVE-2005-1239 describes a directory-traversal flaw in Raz‑Lee’s third‑party tool used with the iSeries (AS/400) FTP server. The vulnerability allows remote attackers to access arbitrary files, including those in qsys.lib, by sending crafted "." sequences in a GET request. Publicly available refer...
CVE-2005-1241
CVE-2005-1241 describes a directory traversal in the Powertech third‑party tool used with the iSeries AS/400 FTP server, enabling remote access to arbitrary files (including those in qsys.lib) via ".." in GET requests. The initial and connected records present no explicit patch or version details...
CVE-2005-1242
Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2005-1240
Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2005-1241
Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2005-1243
CVE-2005-1243 describes a directory traversal vulnerability in a third‑party SafeStone tool used to secure the iSeries AS/400 FTP server. The issue allows remote attackers to access arbitrary files (including those under qsys.lib) via ".." sequences in a GET request, due to a canonicalization/pat...
CVE-2005-1238
CVE-2005-1238 affects the built-in FTP server for IBM iSeries AS/400 systems. The root cause is failure to enforce a restricted document root, enabling an attacker to read or write arbitrary files, including sensitive QSYS databases, by sending a full pathname in a GET or PUT request. Impact per ...
CVE-2005-1239
Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2005-1242
The CVE-2005-1242 entry describes a directory traversal vulnerability in the third‑party Bsafe tool used to secure the iSeries AS/400 FTP server. The flaw allows remote attackers to access arbitrary files, including those in qsys.lib, by using ".." sequences in a GET request. Affected software is...
CVE-2005-1243
Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
RaidenFTPd 2.4 - Unauthorized File Access
source: https://www.securityfocus.com/bid/13292/info RaidenFTPD is prone to a vulnerability that could allow unauthorized access to files outside the FTP root. The issue exists due to a lack of sufficient sanitization performed on 'SITE urlget' requests. Directory traversal sequences may be passe...
CVE-2005-1244
Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that...
CVE-2005-1240
Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...