Lucene search
+L

398 matches found

securityvulns
securityvulns
added 2003/06/09 12:00 a.m.39 views

[LeapFTP] "PASV" Reply Buffer Overflow Vulnerability

---------------------------------------------------------------------- SUMMARY : LeapFTP "PASV" Reply Buffer Overflow Vulnerability PRODUCT : LeapFTP VERSIONS : 2.7.3.600 VENDOR : LeapWare http://www.leapware.com/ SEVERITY : Critical. Code Execution. DISCOVERED BY : nesumin AUTHOR : :: Operash ::...

0.4AI score
SaveExploits0
Cvelist
Cvelist
added 2003/04/02 5:00 a.m.35 views

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

7.8AI score0.02116EPSS
SaveExploits0References2
NVD
NVD
added 2002/12/31 5:00 a.m.19 views

CVE-2002-1943

SafeTP 1.46, when network address translation NAT is being used, leaks the internal IP address of the FTP server in a response to a passive mode PASV file transfer request...

5CVSS6.5AI score0.02701EPSS
SaveExploits2References3
securityvulns
securityvulns
added 2002/10/26 12:00 a.m.33 views

IPSwitch, Inc. WS_FTP Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: IPSwitch, Inc. WSFTP Server Versions: v3.13 dated 2002.08.07, possibly others. Severity: Medium-Hot Author: low halo [email protected] Date: October 25th, 2002 Revision: 1.0 Overview WSFTP v3.13 by IPSwitch, Inc., is vulnerable to the...

SaveExploits0
NVD
NVD
added 2002/10/04 4:00 a.m.21 views

CVE-2002-1063

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

5CVSS6.6AI score0.02442EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2002/08/31 4:00 a.m.32 views

CVE-2002-1063

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

6.6AI score0.02442EPSS
SaveExploits0References3
NVD
NVD
added 2002/08/12 4:00 a.m.29 views

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

7.5CVSS7.8AI score0.02116EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2002/06/11 4:00 a.m.29 views

CVE-2002-0600

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive PASV mode request...

7.8AI score0.02448EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2002/05/17 12:00 a.m.42 views

Buffer overflow in lukemftp

Buffer overflow on preparing PASV command...

3.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2002/05/16 4:00 a.m.26 views

CVE-2002-0221

Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...

5CVSS6.8AI score0.01614EPSS
SaveExploits0References3
CVE
CVE
added 2002/05/03 4:00 a.m.57 views

CVE-2002-0221

CVE-2002-0221 affects Etype Eserv 2.97. The issue is caused by remote attackers sending a large number of PASV commands, exhausting ports 1024–5000 and preventing the server from accepting valid PASV connections, resulting in a denial of service. Exploit details and mitigation are not provided in...

5CVSS7.2AI score0.01614EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2002/05/03 4:00 a.m.27 views

CVE-2002-0221

Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...

6.8AI score0.01614EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2002/01/30 12:00 a.m.59 views

Vulnerabilities in EServ 2.97

There are a couple of vulnerabilities in EServ 2.97. Vulnerability 1 The FTP server doesn't close the sockets that are allocated from using the PASV command. After all ports from 1024 to 5000 are listening after running a lot of PASV commands in a row no users can use passive mode anymore until t...

1.8AI score
SaveExploits0
securityvulns
securityvulns
added 2002/01/30 12:00 a.m.48 views

DoS и подключение к привелегированным портам в E-Serv (ftp bounce)

Не закрывается порт открытый при комманде PASV, не проверяется IP и номер порта в команде PORT...

0.3AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2001/12/06 5:00 a.m.18 views

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

7.5CVSS6.6AI score0.01315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2001/11/22 5:00 a.m.12 views

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

7.4AI score0.01315EPSS
SaveExploits0References2
CVE
CVE
added 2001/11/22 5:00 a.m.44 views

CVE-2001-0827

Cerberus FTP server versions 1.0–1.5 are affected by a vulnerability that allows remote denial of service (crash) via a high volume of PASV requests. The NVD entry CVE-2001-0827 confirms the issue and impact (availability loss). Several connected sources reference the same description, with PT-20...

7.5CVSS7AI score0.01315EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2001/11/22 5:00 a.m.23 views

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

6.6AI score0.01315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2001/11/22 12:00 a.m.9 views

PT-2001-1995 · Cerberus · Cerberus Ftp Server

Name of the Vulnerable Software and Affected Versions: Cerberus FTP server versions 1.0 through 1.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a large number of "PASV" requests. Recommendations: For Cerberus FTP server versions 1....

7.5CVSS7.4AI score0.01315EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2001/08/29 4:00 a.m.30 views

CVE-2001-0702

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long 1 username, 2 password, or 3 PASV command...

7.6AI score0.09773EPSS
SaveExploits2References4
Rows per page
Query Builder