CVE-2002-0126

CVE-2002-0126 : Buffer overflow in BlackMoon FTP Server 1.0–1.5 allows remote code execution via a long argument to (1) USER, (2) PASS, or (3) CWD. Affected software is BlackMoon FTP Server; underlying cause is overflow in handling overly long commands/arguments. Impact per the entry is remote ar...

CVE-1999-1156

BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns...

CVE-2001-0644

CVE-2001-0644 affects Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3, where passwords are stored in plaintext in the Rumpus User Database file located in the prefs folder. The underlying issue is insecure password storage, which could allow an attacker who can access the server filesystem...

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0621

The CVE concerns Cisco Content Service (CSS) 11000 series switches with WebNS 4.01B23s or 4.10B13s. The FTP server on these devices allows an FTP user to read and write arbitrary files via GET or PUT commands. Root cause: an FTP service misconfiguration/logic flaw enabling unauthorized access to ...

CVE-1999-1326

wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR abort file transfer command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files...

CVE-2001-0706

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

CVE-1999-1156

CVE-1999-1156 affects BisonWare FTP Server 4.1 and earlier. The issue is a remote denial-of-service triggered by a malformed PORT command containing a non-numeric character and a large number of carriage returns. The available sources describe an impact of availability loss (partial) with no conf...

CVE-1999-1326

Wu-FTPD ABOR privilege escalation (CVE-1999-1326) affects the wu-ftpd server. The vulnerability arises when handling an ABOR after a data connection has closed, due to a flaw in the dologout() path that can allow a remote attacker to gain elevated privileges (potentially root). Exploitation could...

CVE-2001-0646

The CVE concerns Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3. A remote attacker can cause a denial-of-service (hang) by supplying a directory name of a specific length. The available documents do not specify the underlying root cause, affected components beyond the FTP server, or concr...

SECURITY.NNOV: Buffer overflows in Worldgroup

Dear bugtraq, Topic: buffer overflows in WorldGroup 3.0 ftp and web servers Authors: Limpid Byte team http://lbyte.void.ru, [email protected] Date: February, 25 2002 Software: WorldGroup 3.x Vendor: Galacticomm http://www.gcomm.com/ Risk: High Remote: Yes Exploitable: Yes Vendor Status: Not contacted...

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service // source: https://www.securityfocus.com/bid/4185/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers....

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service

// source: https://www.securityfocus.com/bid/4185/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been reported in the FTP server includ...

InstantServers MiniPortal Multiple Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= InstantServers MiniPortal Multiple Vulnerabilities =- Release date: Saturday, February 9, 2002 Introduction: InstantServers' MiniPortal provides a complete solution for fast and easy web site hosting on a Windows PC. It features a Apache-...

Многочисленные ошибки в InstantServers MiniPortal (multiple bugs)

Переполнения буфера, обратный путь в директориях и прочее в FTP-сервере...

Vulnerabilities in EServ 2.97

There are a couple of vulnerabilities in EServ 2.97. Vulnerability 1 The FTP server doesn't close the sockets that are allocated from using the PASV command. After all ports from 1024 to 5000 are listening after running a lot of PASV commands in a row no users can use passive mode anymore until t...

BlackMoon FTPd Buffer Overflow Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= BlackMoon FTPd Buffer Overflow Vulnerability =- Release date: Tuesday, January 15, 2002 Introduction: BlackMoon is a native windows2000 and XP FTP server application with features such as virtual directories, user accounts, file resuming an...

BrowseFTP Client 1.62 - Remote Buffer Overflow

BrowseFTP Client 1.62 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3781/info BrowseFTP is an ftp client that runs on various Microsoft Windows operating systems. An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a BrowseFTP...

BrowseFTP Client 1.62 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3781/info BrowseFTP is an ftp client that runs on various Microsoft Windows operating systems. An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a BrowseFTP client user. This is acheivable when a BrowseFT...