Personal FTP Server buffer overflow

Buffer overflow on USER longer than 320 characters...

Personal FTP Server

--------------------------------------- Product : Personal FTP Server Version : ? OSystem : Windows Authors : CoolSoft WebSite : http://www.cooolsoft.com Problem : Buffer Overflow in field USER --------------------------------------- Description: ------------ rus: ==== Переполнение буфера...

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow

source: https://www.securityfocus.com/bid/6642/info A buffer overflow condition has been reported for the CuteFTP application. The vulnerability is due to insufficient bounds checking performed on certain FTP command responses. If CuteFTP is used to connect to a malicious FTP server that sends an...

Multiple FTP Server Traversal Arbitrary File/Directory Access

The remote FTP server allows anybody to switch to the root directory and read potentially sensitive files. TRUSTED...

CVE-2002-1545

CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response...

CVE-2002-1522

CVE-2002-1522 concerns a buffer overflow in PowerFTP FTP server 2.24 (and possibly other versions). The vulnerability allows a remote attacker to cause a denial of service and, potentially, execute arbitrary code by sending a long USER argument. The available documents consistently describe the i...

CVE-2002-1545

CooolSoft Personal FTP Server 2.24 is affected by a vulnerability where a remote attacker can trigger a PWD command to obtain the absolute pathname of the FTP root, exposing the full filesystem path in the response. This is the explicit impact described in CVE-2002-1545. The available documents d...

CVE-2002-1544

CVE-2002-1544 affects CooolSoft Personal FTP Server 2.24. It is a directory traversal vulnerability allowing remote attackers to read or modify arbitrary files by using .. sequences in LIST, mkdir, put, or get commands. The root cause is improper normalization of path input enabling access outsid...

Multiple FTP Server setproctitle Function Arbitrary Command Execution

The remote FTP server misuses the function setproctitle and may allow an attacker to gain a root shell on this host by logging in as 'anonymous' and providing a carefully crafted format string as its email address. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11391...

SunFTP Multiple Command Traversal Arbitrary File Creation/Deletion

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT. This script was written by Xue Yong Zhi See the Nessus Scripts License for details Changes by...

WU-FTPD Unspecified Security Issue

The version of WU-FTPD running on the remote host has an unspecified remote vulnerability. This is reportedly due to an unspecified bug in glob.c discovered by the SuSE security team. Nessus verified this vulnerability by looking at the banner of the remote FTP server. C Tenable Network Security,...

Directory traversal in multiple FTP servers

It's possible to leave outside FTP root...

CVE-2003-1075

Unknown vulnerability in the FTP server in.ftpd for Solaris 2.6 through 9 allows remote attackers to cause a denial of service temporary FTP server hang, which affects other active mode FTP clients...

PlatinumFTPServer Multiple Vulnerabilities

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server : - The 'dir' command can be used to examine the filesystem of the machine and gather further information about the...

Directory traversal vulnerabilities found in NITE ftp-server version 1.83

Directory traversal vulnerabilities found in NITE ftp-server version 1.83 Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY The NiteServer is a simple FTP-Server program with some special features. It is free and easy to...

Vulnerabilties in Xynph FTP Server 1.0

Vulnerabilties in Xynph FTP Server 1.0 Xynph FTP Server allows Directory Traversal Example: Verbindung mit zero-x. 220 Herzlich Willkommen! -Xynph FTP-Server- Benutzer zero-x:none: anonymous 331 Password required for anonymous. Kennwort: billsucks 230 User anonymous logged in. Ftp pwd 257...

Xynph FTP Server 1.0 - Directory Traversal

Xynph FTP Server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/6587/info A problem with the handling of input has been reported in Xynph FTP Server. Under some circumstances, it may be possible for a remote user to escape the FTP root directory using relative path notation...

BRS WebWeaver FTP Server vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver FTP Server vulnerabilities product: BRS WebWeaver 1.01 FTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/10/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls: http://f0kp.iplus.ru/bz/012.en.t...

Xynph FTP Server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/6587/info A problem with the handling of input has been reported in Xynph FTP Server. Under some circumstances, it may be possible for a remote user to escape the FTP root directory using relative path notation. This could allow unauthorized access to...

PlatinumFTPServer 1.0.6 - Directory Traversal

PlatinumFTPServer 1.0.6 - Directory Traversal source: https://www.securityfocus.com/bid/6554/info PlatinumFTPserver is an FTP server for Microsoft Windows systems. It is commercially available, and distributed by PlatinumFTP. A directory traversal vulnerability has been reported in...