28 matches found
CVE-2008-2822
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 8.0 build 1 allow remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a 1 LIST or 2 MLSD command...
3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal
source: https://www.securityfocus.com/bid/29749/info 3D-FTP is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues allows an attacker to write arbitrary files to locations outside of the FTP client's...
Directory traversal
Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to create or overwrite arbitrary files via ..\ dot dot backslash sequences in responses to 1 MLSD and 2 LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged f...
FireFTP MLSD及LIST命令目录遍历漏洞
BUGTRAQ ID: 29289 FireFTP是在Firefox中使用的FTP客户端扩展。 FireFTP在处理从FTP服务器所返回的MLSD和LIST命令响应时存在目录遍历漏洞，如果用户受骗从恶意的FTP服务器下载了包含有目录遍历序列文件名的文件的话，就会导致向用户系统的任意位置写入文件。 FireFTP 0.97.1 FireFTP ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
FireFTP filename directory traversal sequence vulnerability
Overview The FireFTP Mozilla Firefox extension contains a vulnerability that may allow an attacker to write files to arbitrary locations. Description FireFTP is a Firefox extension that provides FTP client functionality. Firefox extensions can run with Chrome privileges which allow them to...
CVE-2006-2173
Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long 1 PORT or 2 PASS followed by the MLSD command, or 2 the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer...
Buffer overflow
Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long 1 PORT or 2 PASS followed by the MLSD command, or 2 the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer...
