6380 matches found
Matu FTP Server 1.13 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/4792/info Matu FTP Server is a freely available FTP server for Microsoft Windows 95 and 98 operating systems. Matu FTP Server is vulnerable to a buffer overflow condition. It is possible for a malicious user to craft a request that will result in code...
cqure.net.20020408.netware_nwftpd.a
cqure.net Security Vulnerability Report No: cqure.net.20020408.netwarenwftpd.a ======================================== Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the server cpu to spike at 100 cpu hogging t...
CVE-2002-0264
The CVE-2002-0264 entry concerns PowerFTP Personal FTP Server (versions 2.03–2.10). The vulnerability results from plaintext storage of sensitive account information in the ftpserver.ini configuration file, allowing attackers who can access that file to gain privileges. The impact is confidential...
CVE-2001-1300
Dynu FTP server
CVE-2001-1300
Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...
CVE-2002-0336
CVE-2002-0336 describes a buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier. The issue can be triggered by a LIST command containing a large number of /, *, and .. characters, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The pr...
CVE-2002-0336
Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / slash, wildcard, and .. characters...
3CDaemon DoS exploit
3Cdaemon 2.0 revision 10 for the Windows platform contains a BOF vulnerability at all times, including the login prompt. When 400+ chars are sent to the FTP server, it crashes emmediatly. Remote exploit is included. For more details see the exploit as well. greets, skyrim - [email protected] MaD...
FTP bounce attack through Raptor Firewall
It;s possible to make FTP server behind firewall to connect to any IP and TCP port in internal network, since PORT command with internal adress doesn't processed correctly...
3CDaemon 2.0 - Buffer Overflow (1)
3CDaemon 2.0 - Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4638/info 3CDaemon is an FTP server developed by Dan Gill of 3Com. Reportedly, it is possible to initiate a buffer overflow on a host running 3CDaemon. Submitting an unusually large amount of data to the ftp server, cou...
3CDaemon 2.0 - Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/4638/info 3CDaemon is an FTP server developed by Dan Gill of 3Com. Reportedly, it is possible to initiate a buffer overflow on a host running 3CDaemon. Submitting an unusually large amount of data to the ftp server, could trigger a stack-based overflow...
CVE-2001-1228
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server...
CVE-2001-1228
CVE-2001-1228 describes buffer overflows in gzip (notably versions from 1.2.4 and 1.3x and other releases) that could allow code execution via a long filename, potentially when gzip is used on an FTP server. Connected documents corroborate the vulnerability and point to advisories (e.g., Debian D...
MS02-018: Microsoft IIS FTP Status Request DoS (uncredentialed check)
It was possible to make the remote FTP server crash by sending the command 'STAT ?AAAAA....AAAAA'. There is a bug in certain versions of Microsoft's FTP server that can be exploited in this fashion. Other FTP servers may also react adversely to such a string. An attacker may leverage this issue t...
Typsoft FTP Server: yet another directory traversal vulnerability
Method: simple directory traversal Risk: Medium Website: www.typsoft.com updated version available Hello All versions of TYPSoft FTP Server 0.97.1 and previous, but not tested are vulnerable to another directory traversal vulnerability than the one already published on BugTraq. A directory...
Netwin Surge FTP Server does not adequately validate user input thereby allowing directory traversal
Overview Surge FTP Server 2.0a contains a directory traversal vulnerability. Description Surge FTP Server 2.0a allows remote users to list files outside the FTP root directory. --- Impact Attackers may list files from directories to which access was not granted. --- Solution Upgrade to version...
CVE-2002-0126
Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...
CVE-2001-1142
The CVE-2001-1142 entry concerns ArGoSoft FTP Server 1.2.2.2, which uses weak password encryption. The underlying issue, as described in the connected sources, is that passwords stored in the password file are protected by weak encryption, enabling an attacker with access to that file to gain pri...