Buffer overflow in ArgoSoft FTP Server

Product: ArGoSOft FTP Server Version: 1.22 other ? OffSite: http://www.argosoft.com/ Problem: Remote buffer overflow -------------------------------------------------------------- ArGoSOft FTP Server - FTP server for Windows. He is exposed to attack. The server does not process the input data...

CVE-2003-1206

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

Format String Vulnerability in Crob Ftp Server

Package: Crob Ftp Server Auth: Crob Software Studio www.crob.net/studio/ftpserver/ Version: 2.50.4 Build 228 Vulnerability: Format String Risk: High Vulnerability Description: A format string flaw in the authentication process allows remote attackers without valid user/pass to execute arbitrary...

Crob FTP server Fotmat string bug

Format string bug in processing USER command...

PFTP Cleartext Local Password Disclosure

The remote web server is running PFTP. This software stores the list of user names and passwords in clear text in \Program Files\PFTP\PFTPUSERS3.USR. An attacker with a full access to this host may use this flaw to gain access to other FTP servers used by the same users. C Tenable Network Securit...

Crob FTP Server 2.50.4 - Remote 'Username' Format String

source: https://www.securityfocus.com/bid/7776/info A vulnerability has been reported for Crob FTP Server. The problem occurs due to invalid format specifiers used when displaying a user-supplied username. As a result, it may be possible for an attacker to embed format specifiers within a malicio...

Crob FTP Server 2.50.4 - Remote Username Format String

Crob FTP Server 2.50.4 - Remote Username Format String source: https://www.securityfocus.com/bid/7776/info A vulnerability has been reported for Crob FTP Server. The problem occurs due to invalid format specifiers used when displaying a user-supplied username. As a result, it may be possible for ...

Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access

The remote FTP server is vulnerable to a flaw that allows users to access files outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : ftp quote stat ../ Some versions of VisNetic FTP Server and Titan FTP Server are known to be affected by this issue. C...

Crob FTP Server user Field Remote Format String

The version of Crob FTP server running on the remote host has a format string vulnerability when processing the USER command. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; References: Date: 2 Ju...

pablo software Solutions baby ftp server 1.2 - Directory Traversal

pablo software Solutions baby ftp server 1.2 - Directory Traversal source: https://www.securityfocus.com/bid/7749/info It has been reported that Baby FTP Server does not properly handle some types of requests. This may make it possible for a remote user to gain access to resources outside of the...

pablo software Solutions baby ftp server 1.2 - Directory Traversal

source: https://www.securityfocus.com/bid/7749/info It has been reported that Baby FTP Server does not properly handle some types of requests. This may make it possible for a remote user to gain access to resources outside of the FTP root directory. CWD ... CWD /... CWD /...... CWD ... CWD ...CWD...

CVE-2003-0271

Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...

BlackMoon FTP Server blackmoon.mdb Plaintext Password Disclosure

BlackMoon FTP server is installed on the remote host. FTP usernames and passwords are stored on the server in plaintext in a filed called 'blackmoon.mdb.' Any user with an account on this host may read the credentials stored in this file, and use them to connect to this FTP server. C Tenable...

CVE-2003-0342

Summary: CVE-2003-0342 affects BlackMoon FTP Server 2.6 Free Edition (and possibly other distributions). Affected component is the blackmoon.mdb database where usernames and passwords are stored in plaintext. The underlying issue enables local users who have an account on the host to read credent...

CVE-2003-0342

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition (and possibly other versions) returns an "Account does not exist" message when an invalid username is provided, enabling an attacker to enumerate valid accounts and, as a consequence, facilitate brute‑force login attempts. The Nessus plugin confirms the enume...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...

Prishtina FTP Client 1.x - Remote Denial of Service

source: https://www.securityfocus.com/bid/7671/info Prishtina FTP client is allegedly prone to a denial of service vulnerability. The condition is reportedly triggered when processing FTP server banners of excessive length. As a result, a malicious attacker-controlled server may be used to crash ...

[[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration

Telhack 026 Inc. Security Advisory - 4 Name: Blackmoon FTP Server 2.6 Free Edition Impact: Medium Date: May 21 / 2003 Daniel Nystrm a.k.a. excE [email protected] I N F O BlackMoon FTP Server is an FTP daemon written specifically for Windows 2000/XP and above. It takes advantage of all the new...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...