198 matches found
Ruby < 2.2.8 / < 2.3.5 / < 2.4.2 / < 2.5.0-preview1 - 'NET::Ftp' Command Injection
While using NET::Ftp I realised you could get command execution through "malicious" file names. The problem lies in the gettextfileremotefile, localfile = File.basenameremotefile method. When looking at the source code, you'll note: def gettextfileremotefile, localfile = File.basenameremotefile,...
Coreutils 4.5.x LS Width Argument Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8875/info Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been reported that excessiv...
iPhone FtpDisc 1.0 - Denial of Service
No description provided by source. !/usr/bin/perl Title: FtpDisc for Iphone - Remote DOS Exploit Date: 23/02/2010 Author: Ale46 - ale46atparanoicidotorg Software Link: http://mochasoft.dk/iphoneftp.htm Version: 1.0 Note: FtpDisc Lite has the same vuln Greetz: Gandalf use Net::FTP; if@ARGV1 print...
WinFTP Server 1.6 - Denial of Service Exploit
No description provided by source. !/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1 English version Sending 40 times a username and a buffer of 1500 bytes as pass,will crash the server,as soon as is not minimized in Target computer.If h...
HP Tru64 4.0/5.1 - POSIX Threads Library Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete...
WzdFTPD <= 0.5.4 - Remote Command Execution Exploit
No description provided by source. 0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | / \ /...
Microsoft IIS 4.0/5.0 FTP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2717/info Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing specially placed...
War FTP Daemon 1.8 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12384/info War FTP Daemon is reported prone to a remote denial of service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. War FTP Daemon 1.82.00-RC9 is...
PlatinumFTP <= 1.0.18 Multiple Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl pftpdos-ai1.pl - Remote DoS against PlatinumFTP 10.1.18 Details:http://seclists.org/lists/bugtraq/2005/Mar/0222.html If you don't get the server down try to change/play a little bit with the Timeout ports at securityforest dot com | greetings to...
Teamtek Universal FTP Server Multiple Commands Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can exploit these issues to crash the affected...
FileCOPA FTP Server <= 1.01 (LIST) Remote Buffer Overflow Exploit (2)
No description provided by source. ============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve...
Golden FTP Server <= 2.02b Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w Barabas - www.whitehat.co.il - cheers to muts and all peeps at WH. XPSP2 goldenftpserver sploit - bind 4444 use strict; use Net::FTP; my $payload=\x41x260; $payload .=\x65\x82\xa5\x7c;jmpesp $payload .=\x90x32;not really necessary...blah...
KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit
No description provided by source. !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my...
ProFTPD 1.3 'mod_sql' Username SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33722/info ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to manipulate SQL...
ArGoSoft FTP Server <= 1.4.3.5 - Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port = @ARGV1; $debug = @ARGV2;...
zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal
No description provided by source. !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed...
KnFTPd 1.0.0 Denial Of Service
!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...
KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit
Exploit for windows platform in category dos / poc !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; us...
KnFTPd 1.0.0 - FEAT Denial of Service (PoC)
KnFTPd 1.0.0 - FEAT Denial of Service PoC !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FT...
KnFTPd 1.0.0 - 'FEAT' Denial of Service (PoC)
!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...