Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack b...

Rumpus FTP Server 1.3.x/2.0.3 - Stack Overflow Denial of Service

source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack by making a directory with an unusual number of sub-folders. This...

TransSoft Broker FTP Server 3.0/4.0/4.7/5.x - CWD Buffer Overflow

source: https://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence can, if repeatedly issued, create a buffer overflow causing the...

TransSoft Broker FTP Server 3.04.04.75.x - CWD Buffer Overflow

TransSoft Broker FTP Server 3.04.04.75.x - CWD Buffer Overflow source: https://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence ca...

alt3kx-advisories-2001.txt

====================================================================== QVT/NET 4.3 FTP server Directory Traversal Author: alt3kx! Date: 2001-05-22 Site: www.raza-mexicana.org Greet to: 0x90, drfdisk^, Dex, PaTa Teams: Raregazz - X-ploit and S0d vicente F0x no rulas wey!...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2001-0256

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...

CVE-2001-0255

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name e.g. C: in the requested pathname...

ACLogic CesarFTP 0.98b - Directory Traversal

source: https://www.securityfocus.com/bid/2786/info CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems. CesarFTP on Windows 98/Me platforms contains a 'directory traversal' vulnerability. If a user requests to change directories to "..." from within a mapped directory,...

ACLogic CesarFTP 0.98b - Directory Traversal

ACLogic CesarFTP 0.98b - Directory Traversal source: https://www.securityfocus.com/bid/2786/info CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems. CesarFTP on Windows 98/Me platforms contains a 'directory traversal' vulnerability. If a user requests to change...

CVE-2001-0480

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...

CVE-2001-0248

Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings...

CVE-2001-0421

The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...

CVE-2001-0248

HP-UX ftpd glob() Expansion STAT Buffer Overflow (CVE-2001-0248): The HP-UX 11 FTP server is affected by a buffer overflow triggered by the STAT command when a long pathname is expanded via glob(), allowing remote attackers to execute arbitrary commands. Affected component: HP-UX FTP daemon; root...

CVE-2001-0264

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-0421

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...

CVE-2001-0264

Summary (CVE-2001-0264): Gene6 G6 FTP Server 2.0 (also BPFTP Server 2.10) exposes NetBIOS credentials when information about a file in a network share is requested, causing the server to send credentials to the share owner’s host and enabling eavesdropping. Affected component: BPFTP/G6 FTP Server...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0452

CVE-2001-0452 affects the BRS WebWeaver FTP server prior to 0.64 Beta. The vulnerability allows a remote attacker to obtain the real pathname of the server by issuing a sequence: first a problematic CD * command, followed by an ls. The available documents confirm the affected product and the exac...