Zaurus PDA FTP Server Unpassworded root Account

The remote Zaurus FTP server can be accessed as the user 'root' with no password. An attacker may use this flaw to steal or modify the content of your PDA, including but not limited to your address book, personal files, and list of appointments. C Tenable Network Security, Inc. Script audit and...

CVE-2002-0558

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...

cqure.net.20020521.netware_nwftpd_fmtstr

cqure.net Security Vulnerability Report No: cqure.net.20020521.netwarenwftpdfmtstr ============================================ Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the FTP server to ABEND resulting in...

CVE-2001-1043

ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...

CVE-2001-1043

The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...

CVE-2001-1295

CVE-2001-1295 is a directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the CD command. The available sources confirm the affected software and the traversal nature but do not provide exploit...

CVE-2001-1295

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2002-0336

Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / slash, wildcard, and .. characters...

CVE-2001-1300

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2002-0606

Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long commands such as login...

CVE-2002-0558

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...

CVE-2002-0558

TYPSoft FTP Server is affected by a directory traversal flaw in versions 0.97.1 and earlier, allowing a remote authenticated (or possibly anonymous) user to list arbitrary directories via a LIST command using .. with a wildcard. The root cause is a traversal vulnerability in the LIST handling (an...

CVE-2002-0405

Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . dot characters...

CVE-2002-0405

CVE-2002-0405 concerns Transsoft Broker FTP Server 5.0 evaluation. It describes a buffer overflow triggered by a CWD command containing a large number of dots, allowing remote denial of service and possibly arbitrary code execution. The provided connected documents do not include explicit exploit...

CVE-2002-0606

CVE-2002-0606 affects the 3Cdaemon 2.0 FTP server. A buffer overflow allows remote attackers to crash the service and potentially execute arbitrary code via long commands such as login. The provided documents describe the vulnerability and impact (denial of service and potential code execution) b...

MPEi/X Default FTP Accounts

The remote FTP server has one or more accounts with a blank password. This script was written by H D Moore See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, changed family 11/04/10 include"compat.inc"; ifdescription scriptid11000; scriptversion "1.22";...

[[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS

Telhack 026 Inc. Security Advisory - 3 Name: Shambala Server 4.5 Impact: Major FTP Server vuln., Medium Web Server vuln. Date: June 30 / 2002 Daniel Nystrm a.k.a. excE [email protected] I N F O Shambala Server is a personal Web/FTP server for Win 9/NT. When the web server is started it also start...

Problems with various windows FTP servers

Hi, I am just writing a small set of perl scripts, to test server implementations of different protocols agains common problems i.e. Buffer overflow and format strings.. . The first script is against FTP servers, and just stupidly sends stuff to a server, verifies if the server crashes and if it...

Matu FTP Server 1.13 - Remote Buffer Overflow

Matu FTP Server 1.13 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/4792/info Matu FTP Server is a freely available FTP server for Microsoft Windows 95 and 98 operating systems. Matu FTP Server is vulnerable to a buffer overflow condition. It is possible for a malicious user t...

MatuFtpServer Remote Buffer Overflow and Possible DoS

MatuFtpServer Remote Buffer Overflow and Possible DoS /--------------------------- Description ---------------------------/ MatuFtpServer http://www.matusoft.com/matuftpserver/ is a Japanese FTP server software for Windows95/98. We found a security vulnerability in the product that allow attacker...