WU-FTPD Multiple Vulnerabilities (OF, Priv Esc)

It was possible to make the remote FTP server crash by creating a huge directory structure. This is usually called the 'wu-ftpd buffer overflow' even though it affects other FTP servers. An attacker can exploit this issue to crash the FTP server, or execute arbitrary code. C Tenable Network...

ncftpd.2.txt

Date: Tue, 23 Feb 1999 14:59:14 -0400 From: Julien Nadeau To: [email protected] Subject: NcFTPd remote buffer overflow Proof of Concept - Security Advisory 02/23/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program NcFTPd Description FTP server...

ncftpd.txt

Proof of Concept - Security Advisory 02/16/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program NcFTPd Description FTP server commercial Severity Can port anywhere / spoof Synopsis: NcFTPd is a commercial FTP File Transfer Protocol server, in the NcFTP produc...

trojan-backdoor-ftp.win.tue.nl.txt

Date: Sun, 24 Jan 1999 09:03:42 -0500 From: Trevor Johnson To: [email protected] Subject: Re: util-linux compromised I just received the following letter: Date: Sun, 24 Jan 1999 04:01:55 -0500 EST From: John Stange Subject: util-linux compromised? I grabbed util-linux-2.9g yesterday from...

ftpd.txt

------------------------------------------------------------------------- Netect, Inc. General Public Security Advisory % Advisory: palmetto.ftpd % Issue date: February 9, 1999 % Revision: February 8, 1999 % Contact: Jordan Ritter Topic Remote buffer overflows in various FTP servers leads to...

bisonware.ftp.txt

Date: Mon, 17 May 1999 12:52:02 -0400 From: Russ To: [email protected] Subject: Vulnerabilities in BisonWare FTP Server 3.5 Arne Vidstrom submitted the following observations regarding BisonWare FTP Server 3.5. I contacted the authors of BisonWare and gave them a copy of Arne's...

broker.ftp.server.3.0.txt

Date: Tue, 1 Jun 1999 07:24:24 +0200 From: Arne Vidstrom To: [email protected] Subject: Vulnerability in Broker FTP Server v. 3.0 Build 1 Hi, I've found a vulnerability in Broker FTP Server v. 3.0 Build 1. Here's an example: You have it installed with FTP root in c:\FTProot and you...

Windows NT FTP 'guest' Account Present

The remote Windows host has a 'guest' FTP account enabled. This could allow a remote attacker to upload or download arbitrary files on the remote host. Note that this plugin only tests for guest accounts over FTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10166;...

Multiple FTP Server QUOTE CWD Command Home Path Disclosure

It is possible to determine the full path of the home directory of the 'ftp' user by issuing the 'CWD' command. An attacker can exploit this to determine where to put a .rhost file using other security flaws. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10087;...

Linux FTP Server Backdoor Detection

There is a backdoor in the old FTP daemons of Linux that allows remote users to log in as 'NULL' with password 'NULL'. These credentials provide root access. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10080; scriptversion "1.27"; scriptcvsdate"Date: 2018/06/13...

Serv-U CWD Command Overflow

The remote FTP server is affected by a buffer overflow vulnerability. A remote, authenticated user can cause a denial of service via a long 'CWD' or 'LS' command. An attacker could exploit this to crash the affected host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft IIS FTP Server NLST Command Overflow DoS

It is possible to make the IIS FTP server close all the active connections by issuing a too long NLST command, which will make the server crash. An attacker can use this flaw to prevent people from downloading data from your FTP server. C Tenable Network Security, Inc. include"compat.inc";...

FTP Privileged Port Bounce Scan

It is possible to force the remote FTP server to connect to third parties using the PORT command. The problem allows intruders to use your network resources to scan other hosts, making them think the attack comes from your network. TRUSTED...

TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service

source: https://www.securityfocus.com/bid/1690/info Long commands ie., over 2048 bytes sent to TYPSoft FTP Server cab cause the server to hang, requiring a manual restart to restore the process. After the release of this advisory Noam Rathaus from http://www.BeyondSecurity.com contributed the...

TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service

TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service source: https://www.securityfocus.com/bid/1690/info Long commands ie., over 2048 bytes sent to TYPSoft FTP Server cab cause the server to hang, requiring a manual restart to restore the process. After the release of this advisory Noam...

CVE-1999-1510

Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long 1 USER, 2 LIST, or 3 CWD commands...

CVE-1999-1156

BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns...

BisonWare BisohFTP Server 3.5 - Multiple Vulnerabilities

BisonWare BisohFTP Server 3.5 - Multiple Vulnerabilities // source: https://www.securityfocus.com/bid/271/info Multiple vulnerabilities in the BisonWare FTP Server can cause denials of service. The vulnerabilities are: The server fails to close the socket created by a PASV command in multiple PAS...

Cat Soft Serv-U FTP Server 2.5 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/269/info The Serv-U FTP server versions 2.5 and earlier are vulnerable to multiple buffer overflows. This can result in a denial of service and at worst in arbitrary code being executed on the system. The vulnerabilities are in the CWD and LS FTP...

Cat Soft Serv-U FTP Server 2.5 - Remote Buffer Overflow

Cat Soft Serv-U FTP Server 2.5 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/269/info The Serv-U FTP server versions 2.5 and earlier are vulnerable to multiple buffer overflows. This can result in a denial of service and at worst in arbitrary code being executed on the...