6380 matches found
DEBIAN-CVE-2001-1413
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries such as FTP server, may allow remote attackers to execute arbitrary code via a long filename argument...
CVE-2004-1277
The downloadselectionrecursive function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / slash characters...
CVE-2004-1281
The ftpretr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. dot dot sequences in a filename...
CVE-2004-1281
The CVE-2004-1281 entry documents a vulnerability in junkie 0.3.1 where the ftp_retr function is exploitable by remote FTP servers to overwrite arbitrary files via .. sequences in a filename. This is a path-traversal issue allowing network-based exploitation with low complexity and no authenticat...
Crystal FTP Pro Client Buffer Overflow
Package: Crystal FTP Pro Auth: http://www.casdk.com/ Version: 2.8 current release and below Vulnerability Type: Arbitrary Command Execution Crystal FTP Pro Description from the Developer: Crystal FTP Pro is a Top awarded FTP client for dummies and experts. The state of the art user-interface used...
tnftp -- mget does not check for directory escapes
When downloading a batch of files from an FTP server the mget command does not check for directory escapes. A specially crafted file on the FTP server could then potentially overwrite an existing file of the user...
CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability
Author: Hongzhen ZhouFortinet, Inc felixzhou at hotmail dot com DATE: 24/11/2004 PRODUCTS: CuteFTP Professional - FTP client for Windows. AFFECTED VERSION: Versions verified to be vulnerable: CuteFTP Professional 6.0 latest verson Other versions are not tested. DETAILS: When CuteFTP Professional...
Ipswitch WS_FTP Server 5.03 - RNFR Buffer Overflow
Ipswitch WSFTP Server 5.03 - RNFR Buffer Overflow ===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...
CVE-2004-0268
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service hang via 1 a long cd command to the FTP server, or 2 a long dir command to the telnet server...
CVE-2004-0287
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...
CVE-2004-0252
TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...
wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit
Exploit for unknown platform in category dos / poc ============================================================== wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit ============================================================== / WodFtpDLX Client ActiveX Control Buffer Overflow Crash...
wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit
No description provided by source. / WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP Professional sp2 operating...
wodFtpDLX Client - ActiveX Control Buffer Overflow Crash
/ WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP Professional sp2 operating system. This exploit creates a fake F...
[Full-Disclosure] [Advisory + Exploit] SlimFTPd <= 3.15
My nice words again are to kotik biatch. clean code on my website. / SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 10 november 2004 Thanx to HDMoore and Metasploit.com for their...
SlimFTPd 3.15 - Remote Buffer Overflow
/ SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 10 november 2004 Thanx to HDMoore and Metasploit.com for their kickass ASM work. ------------------ WHAT IS SLIMFTPD...
SlimFTPd 3.15 - Remote Buffer Overflow
SlimFTPd 3.15 - Remote Buffer Overflow / SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 10 november 2004 Thanx to HDMoore and Metasploit.com for their kickass ASM work...
ArGoSoft FTP Server .lnk Shortcut Upload Arbitrary File Manipulation
The remote host is running ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server is prone to an attack that allows link upload. An attacker, exploiting this flaw, may be able to have read and write access to any files and directories on the FTP server. C Tenable Network Security, Inc...
Ability FTP Server Multiple Command Remote Buffer Overflows
The remote host is running Ability FTP Server. It is reported that the remote version of this software is prone to a remote buffer overflow attack via the 'STOR' and 'APPE' commands. An attacker, exploiting this flaw, would only need to be able to craft and send a query to the FTP server on its...