CVE-1999-0200

CVE-1999-0200 affects the Windows NT FTP server (WFTP). The vulnerability occurs when the guest account is enabled without a password, allowing an attacker to log in to the FTP server using any username and password. Reported sources consistently describe access without authentication leading to ...

serv-u.25b.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local / Remote D.o.S Attack in Serv-U FTP-Server v2.5b for Win9x/WinNT Vulnerability USSR Advisory Code: USSR-2000032 Release Date: February 04, 2000 Systems Affected: Serv-U FTP-Server v2.5b and maybe other versions. Windows 95 Windows 98 Windows Nt...

Cat Soft Serv-U FTP Server 2.5/a/b (Windows 95/98/2000/NT 4.0) - Shortcut

Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcut Vulnerability source: https://www.securityfocus.com/bid/970/info...

Cat Soft Serv-U FTP Server 2.5ab (Windows 95982000NT 4.0) - Shortcut

Cat Soft Serv-U FTP Server 2.5ab Windows 95982000NT 4.0 - Shortcut Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcu...

tinyftpd.exploit.txt

Hello, I translated a following message in BUGTRAQ-JPJapanese by proxy and forward this here. ------- Forwarded Message From: UNYUN To: [email protected] Hi, This is UNYUN@ShadowPenguinSecurity. Tiny FTPd 0.52 beta3 that is Windows FTP server has a buffer overflow vulnerability in...

CVE-1999-0777

IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions...

WU-FTPD 2.4.2/2.5 .0/2.6.0/2.6.1/2.6.2 - FTP Conversion

source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under some configurations where this is enabled a remote us...

WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion

WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under...

ftpd.dos.pl

Who has more free file descriptors & network ports, you or the ftp server ? ftpd's which limit connections to 1 per user@host or similar may have some defense against this, or if they don't support multiple data connections open at the same time. I suspect "many" is the number of ftpd's which are...

serv-u.2.5.txt

Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability PROBLEM: UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a, The buffer overflow is caused by a bad Formed SITE command For the source / binary of this remote / local D.O.S Go to: http://www.ussrback.com/servu/ Vendor...

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user...

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service

source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user, including an 'anonymous' user...

bisonware.ftp.3.5.txt

Remote DoS Attack in BisonWare FTP Server V3.5 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in BisonWare FTP Server V3.5, the buffer overflow is caused by a long user name, 2000 characters, There is not much to expand on.... just a simple hole Example: Go to:...

CVE-1999-1519

Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service resource exhaustion via a long 1 user name or 2 password...

Gene6 G6 FTP Server 2.0 - Buffer Overflow (Denial of Service) (PoC)

Gene6 G6 FTP Server 2.0 - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU...

g6ftp.dos.txt

Remote D.o.S Attack in G6 FTP Server v2.0 beta 4/5 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in G6 FTP Server v2.0 beta 4/5, the buffer overflow is caused by a long user name, 2000 characters. the G6FTP start to do infinites loops in the main program,and start eating all memo...

Gene6 G6 FTP Server 2.0 - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a halt. Source - 19624-1.zip Binary ...

FTPd CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...

CVE-1999-1539

Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long 1 user name or 2 password...

qvt-term.4.2.dos.txt

Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server, the buffer overflow is caused by a long user name / password, 2000 characters, and the re-connection to the Ftp Server. There is not much to expa...