CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

CVE-2001-0405

Concrete details: CVE-2001-0405 affects ip_conntrack_ftp inside the Linux 2.4 iptables RELATED connection tracking. A crafted FTP PORT command could cause the firewall to allow an arbitrary IP/port through the RELATED table, bypassing access restrictions. Implication: arbitrary firewall holes for...

CVE-1999-1514

Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command...

CVE-1999-1539

Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long 1 user name or 2 password...

CVE-1999-1510

Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long 1 USER, 2 LIST, or 3 CWD commands...

CVE-1999-1519

Affected software: Gene6 G6 FTP Server 2.0. Vulnerability: remote denial of service (resource exhaustion) caused by extremely long (1) username or (2) password. Impact/details: CVSS indicates network attack with partial availability impact and no confidentiality/integrity impact and no authentica...

CVE-1999-1539

The CVE-1999-1539 entry concerns a buffer overflow in the FTP server component of QPC Software’s QVT/Term Plus (versions 4.2d and 4.3) and QVT/Net 4.3. The underlying issue is a buffer overflow triggered by excessively long inputs in the user name or password, enabling remote attackers to cause a...

CVE-1999-1544

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST ls command...

CVE-1999-1544

The CVE-1999-1544 entry describes a buffer overflow in the FTP server of Microsoft IIS 3.0/4.0 that can be triggered by a long NLST (ls) command, leading to a denial of service. Affected component: IIS FTP server; root cause: improper handling of long NLST input. Impact: local and, in some cases,...

CVE-1999-1519

Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service resource exhaustion via a long 1 user name or 2 password...

CVE-1999-1514

CVE-1999-1514 affects the Celtech ExpressFS FTP server 2.x. The underlying issue is a buffer overflow triggered by a long USER command, leading to remote denial of service and potentially arbitrary command execution. The vulnerability is exploitable over the network via the FTP protocol. The prov...

CVE-2001-0687

The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...

CVE-2001-0688

Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD "CD . ." command...

CVE-2001-0688

CVE-2001-0688 concerns Broker FTP Server 5.9.5.0, where a remote attacker can trigger a denial of service by repeatedly issuing invalid CD or CWD commands (CD . .). The available connected documents provide the vulnerability description and confirm the affected product and the attack pattern, but...

CVE-2001-0687

Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by 1 issuing a CD command CD C: followed by the LS command, 2 specifying arbitrary paths in the UNC format \computername\sharename...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-1295

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2001-0621

The FTP server on Cisco Content Service 11000 series switches CSS before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands...

CVE-2001-0582

CrushFTP FTP Server 2.1.6 and earlier is affected by a local directory-traversal vulnerability allowing access to arbitrary files via traversal sequences in FTP commands (GET, CD, NLST, SIZE, RETR). The underlying issue is inadequate input filtering that permits ".."-style path traversal, enablin...