CVE-2001-0293

Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. dot dot in the GET command...

CVE-2001-0294

Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via 1 a .. dot dot in a GET command, or 2 a ... in a CWD command...

CVE-2001-0256

CVE-2001-0256 affects FaSTream FTP++ Server 2.0. A remote attacker can cause a denial of service and possibly execute arbitrary commands by supplying a long username, indicating an input handling vulnerability. CVSS v2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No remediation details are provid...

CVE-2001-0294: Undefined Security Weakness

Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via 1 a .. dot dot in a GET command, or 2 a ... in a CWD command...

CVE-2001-0255: Undefined Security Weakness

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name e.g. C: in the requested pathname...

CVE-2001-0254: Undefined Security Weakness

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command...

CVE-2001-0256: Undefined Security Weakness

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...

CVE-2001-0293: Undefined Security Weakness

Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. dot dot in the GET command...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...

CVE-2001-0188

GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...

WU-FTPD 2.4/2.5/2.6 / Trolltech ftpd 1.2 / ProFTPd 1.2 / BeroFTPD 1.3.4 FTP - glob Expansion

source: https://www.securityfocus.com/bid/2496/info Many FTP servers are vulnerable to a denial of service condition resulting from poor globbing algorithms and user resource usage limits. Globbing generates pathnames from file name patterns used by the shell, eg. wildcards denoted by and ?,...

CVE-2001-0188

GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...

CVE-2001-0188

Affected software: GoodTech FTP Server for Windows. Vulnerability: denial-of-service via a flood of connections that causes the server to crash (CVE-2001-0188, affected versions 3.0.1.2.1.0 and earlier). Evidence: multiple sources describe an DoS condition from rapid/abusive connection attempts; ...

CVE-2001-0188: Undefined Security Weakness

GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...

Broker Ftp Server 5.0 Vulnerability

Vulnerability: users can break out of their root directory and list directories. Depending on the priv. you have other commands like delete maybe executed outside of the home. directory. e:crap was used as homedir. deleting files in e:crap is enabled Detail: Problem: Again relative paths. dir:...

Sunftp build9(1) - ftp server Vulnerability

It is possible to break out of the root directory by using relative paths e:crap was used as homedir. of user test. the get command getting files from outside of the root dir. 220 chris FTP Server SunFTP b9 ready on port 21... Benutzer 10.17.3.44:none: test 331 Password required for test. Kennwor...

Vulnerability in TYPSoft FTP Server

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in TYPSoft FTP Server Overview TYPSoft FTP Server v0.85 is an ftp server available from http://www.webmasterfree.com and http://typsoft.n3.net. A vulnerability exists which allows a remote attacker to break out of the...

Netwin SurgeFTP 1.0b - Denial of Service

source: https://www.securityfocus.com/bid/2442/info SurgeFTP is a FTP Server distributed and maintained by Netwin. SurgeFTP is a configurable, easily maintained ftp server, functional on both the UNIX and Windows platforms. A problem with the SurgeFTP program could allow a denial of service to...

defcom.goodtech.ftp.txt

====================================================================== Defcom Labs Advisory def-2001-03 GoodTech Systems FTP Connection DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...