6380 matches found
Hexyn-sa-17.txt
Hexyn / Securax Advisory 17 - Bison FTP Server Directory Traversal Topic: Bison FTP Server Directory Traversal Announced: 2001-02-17 Affects: Bison FTP Server version 4 Release 1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...
Hexyn-sa-15.txt
Hexyn / Securax Advisory 15 - G6 FTP Full Installation Path Topic: G6 FTP Full Installation Path Announced: 2001-02-17 Affects: G6 FTP Server up to version 2.0 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE INFORMATION BELOW IS 100%...
WFTPD "Pro" 3.0 R4 Buffer Overflow
WFTP is the Win/NT FTP server by Alun Jones, "an author acknowledged as an expert in FTP and TCP/IP". This advisory pertains to "Professional" version 3.00 R4, which appears to be the current version. It can be downloaded from the author's site at http://www.wftpd.com/. WFTPD is released as...
@stake Security Advisory: G6 FTP File Existence Disclosure and Netbios Hash Retrieval (A040301-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: G6 FTP File Existence Disclosure and Netbios Hash Retrieval Release Date: 04/03/2001 Application: G6 FTP Server v2.0 exploit and example, other applications vulnerable to Netbi...
Solaris 2.6 - FTP Core Dump Shadow Password Recovery
Solaris 2.6 - FTP Core Dump Shadow Password Recovery source: https://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates ...
Solaris 2.6 - FTP Core Dump Shadow Password Recovery
source: https://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying from desktop to enterprise server...
CVE-2001-0254
FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command...
CVE-2001-0256
CVE-2001-0256 affects FaSTream FTP++ Server 2.0. A remote attacker can cause a denial of service and possibly execute arbitrary commands by supplying a long username, indicating an input handling vulnerability. CVSS v2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No remediation details are provid...
CVE-2001-0254
FaSTream FTP++ Server 2.0 is affected. The vulnerability allows remote attackers to reveal the server’s real pathname by issuing the pwd command, constituting an information-disclosure issue. The provided documents confirm the affected product and the nature of the data exposed (real pathname), b...
CVE-2001-0294
CVE-2001-0294 affects TYPSoft FTP Server 0.85 with a directory traversal vulnerability. The issue allows remote attackers to read arbitrary files by sending a GET with .. (dot dot) or a CWD with ... in the path. Public details across sources reiterate the vulnerable component and input handling a...
CVE-2001-0255
FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name e.g. C: in the requested pathname...
CVE-2001-0255
FaSTream FTP++ Server 2.0 is affected by a vulnerability where remote attackers can list arbitrary directories by issuing the ls command with a path containing a drive letter (e.g., C:). The entry indicates a remote access vector with low complexity and partial confidentiality impact (CVSS 2.0 ba...
CVE-2001-0293
Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. dot dot in the GET command...
CVE-2001-0256
FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...
CVE-2001-0294
Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via 1 a .. dot dot in a GET command, or 2 a ... in a CWD command...
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure
source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...
CVE-2001-0188
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...
WU-FTPD 2.4/2.5/2.6 / Trolltech ftpd 1.2 / ProFTPd 1.2 / BeroFTPD 1.3.4 FTP - glob Expansion
source: https://www.securityfocus.com/bid/2496/info Many FTP servers are vulnerable to a denial of service condition resulting from poor globbing algorithms and user resource usage limits. Globbing generates pathnames from file name patterns used by the shell, eg. wildcards denoted by and ?,...