Gene6 G6 FTP Server 2.0 - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a halt. Source - 19624-1.zip Binary ...

FTPd CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...

CVE-1999-1539

Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long 1 user name or 2 password...

qvt-term.4.2.dos.txt

Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server, the buffer overflow is caused by a long user name / password, 2000 characters, and the re-connection to the Ftp Server. There is not much to expa...

QPC Software QVT Term 4.3QVTNet 4.3 Suite FTP Server - Denial of Service

QPC Software QVT Term 4.3QVTNet 4.3 Suite FTP Server - Denial of Service source: https://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a...

QPC Software QVT Term 4.3/QVT/Net 4.3 Suite FTP Server - Denial of Service

source: https://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that is longer than 2000 characters...

brokerftp.txt

Remote DoS Attack in TransSoft's Broker Ftp Server v3.5 Vulnerability PROBLEM UssrLabs found a Remote DoS Attack in TransSoft's Broker Ftp Server v3.5, the buffer overflow is caused by a long user name 2730 characters. If TransSoft's Broker Server is running as a service the service will start...

TransSoft Broker FTP Server 3.0 x/4.0 - User Name Buffer Overflow

source: https://www.securityfocus.com/bid/783/info If an unusually long user name is passed to the Broker FTP server software, the program will crash. If the program is running as a service, the service will consume all available memory and crash the entire system...

CVE-1999-0950

Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories...

Washington University WU-FTPD 2.5.0 - 'message' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/726/info There is a buffer overflow in wu-ftpd message file expansions which may be remotely exploitable. In situations where the message file can be written to in some way remotely by regular or anonymous users, this may result in a root compromise...

FTP Server Detection

It is possible to obtain the banner of the remote FTP server by connecting to a remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10092; scriptversion"1.57"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/08/17";...

PT-1999-1427 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: WU-FTPD affected versions not specified Description: A buffer overflow issue in WU-FTPD and related FTP servers allows remote attackers to gain root privileges. This is achieved by exploiting macro variables in a message file. Recommendations...

CVE-1999-0080

CVE-1999-0080 affects wu-ftp FTP server 2.4 where PATH_EXECPATH can point to a directory with dangerous commands (e.g., /bin). This misconfiguration allows remote authenticated users to gain root access via the SITE EXEC command. Remediation: upgrade to Wu-FTPD 2.4 or later or adjust PATH EXECPAT...

CVE-1999-0185

The CVE-1999-0185 entry concerns SunOS/Solaris where a remote user could leverage an FTP server’s data port to connect to an rlogin server on a host that trusts the FTP server, enabling remote command execution. The vulnerability arises from an insecure trust relationship between the FTP data pat...

CVE-1999-0080

Certain configurations of wu-ftp FTP server 2.4 use a PATHEXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command...

CVE-1999-0017: Undefined Security Weakness

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce...

CVE-1999-0080: Undefined Security Weakness

Certain configurations of wu-ftp FTP server 2.4 use a PATHEXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command...

CVE-1999-0185: Undefined Security Weakness

In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution...

CVE-1999-0201: Undefined Security Weakness

A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user...

ProFTPD NLST Command Argument Handling Remote Overflow

It was possible to crash the remote FTP server by issuing a specially crafted command, such as 'NLST aaaXXXX%u%...%u%u%u%%u%653300u%n' where 'XXXX' is replaced with four characters - ASCII values 0xDC, 0x4F, 0x07 and 0x08. This issue is known to affect ProFTPD version 1.2.0pre6, although other FT...