Sun Microsystems SunScreen Firewall - Privilege Escalation

Sun Microsystems SunScreen Firewall - Privilege Escalation / Sun Microsystems SunScreen Firewall Root Exploit discovered & exploited by Kingcope January 2011 The SunScreen Firewall can be administrated remotely via a java protocol service which is running on port 3858 on a SunOS machine. This Jav...

CVE-2007-6737

FTPServer.py in pyftpdlib before 0.2.0 does not increment the attemptedlogins count for a USER command that specifies an invalid username, which makes it easier for remote attackers to obtain access via a brute-force attack...

httpd: mod_proxy_ftp globbing XSS

A flaw was found in the modproxyftp module. Where Apache is configured to support ftp-over-httpd proxying, a remote attacker could perform a cross-site scripting attack. CVE-2008-2939...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Sun Solaris 10 ftpd Cross Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 ftpd Cross-site request forgery Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 24.02.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 - - OpenSoalris 2009.06 Original URL:...

Rumba FTP Client 4.2 Buffer Overflow

Exploit Title: Rumba ftp Client 4.2 PASV BoF SEH Date: 2010-04-24 Author: zombiefx & corelanc0d3r Email: darkernetatgmail.com Software Link: http://download.cnet.com/Rumba-FTP/3000-21604-10587778.html Version: Rumba ftp client 4.2 Tested on: Windows XP SP3 SEH overwrite occurs when sending the...

Firefox integer underflow in FTP directory list parser

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service application crash, or obtain sensitive information via a crafted directory listing in a reply...

Firefox integer underflow in FTP directory list parser

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service application crash, or obtain sensitive information via a crafted directory listing in a reply...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Firefox integer underflow in FTP directory list parser

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service application crash, or obtain sensitive information via a crafted directory listing in a reply...

IPSwitch WS_FTP Logging Server Daemon Denial of Service (CVE-2007-3823)

The Ipswitch WSFTP server is a full featured secure File Transfer Protocol FTP server complete with several optional authentication mechanisms, encryption and data access controls. It is fully compliant with the File Transfer Protocol specifications. There exists a denial of service vulnerability...

Cerberus FTP Server超长命令远程拒绝服务漏洞

Bugraq ID: 36390 Cerberus FTP Server是一款FTP服务程序。 Cerberus FTP Server不正确处理超长命令，远程攻击者可以利用漏洞使应用程序停止响应，造成拒绝服务攻击。 Cerberus FTP Server 3.0.3 目前没有解决方案提供： http://www.cerberusftp.com/index.html / vulnerab : Remote Denial of Service Command vulnerab : User Software : Cerberus FTP Server Versian : 3.0.3...

Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP

Overview Hitachi JP1/File Transmission Server/FTP contains multiple vulnerabilities that could allow an attacker to execute arbitrary commands. Impact A remote attacker could execute arbitrary commands. Solution Please refer to the 'Vendor Information' section for the official countermeasure and...

Total Commander FTP Client Traversal Arbitrary File Overwrite

The version of Total Commander installed on the remote host fails to sanitize filenames of directory traversal sequences when downloading files via FTP. If an attacker can trick a user on the affected system into visiting a malicious FTP server, he can leverage this issue to write to arbitrary...

DEBIAN-CVE-2009-2957

Heap-based buffer overflow in the tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read aka RRQ request...

BolinTech DreamFTP Server 1.02 - 'users.dat' Arbitrary File Disclosure

!/usr/bin/perl -w This Bug Similar to others found By My Friend : Stack = so special Thanx So You Can Exploit Arbitrary File Disclosure From The Server == You can use Stack's Exploit To do That But This Exploit i will get Users & Passwords Of The applicatin From : users.dat : C:\Program...

TFTP Detection

The remote host has a TFTP server running. TFTP stands for Trivial File Transfer Protocol. SPDX-FileCopyrightText: 2009 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-5872

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

CVE-2008-5872

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

In the“broiler”create a TFTP server-the vulnerabilities and early warning-the black bar safety net

We are in the attack process often you want to use to a tftp server, if you inconvenient on your machine to install a tftp server, then in the broiler on the installation, this is a better method. We start to learn about what is known as TFTP. TFTP: theTrivialFileTransferProtocol. The small File...