3712 matches found
CVE-2005-2277
Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...
CVE-2005-2277: Undefined Security Weakness
Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...
CVE-2004-2184: Undefined Security Weakness
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or ".." sequences in commands such as 1 dir or 2 put...
security flaw
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...
USN-132-1: ImageMagick vulnerabilities
Damian Put discovered a buffer overflow in the PNM image decoder. Processing a specially crafted PNM file with a small "colors" value resulted in a crash of the application that used the ImageMagick library. CAN-2005-1275 Another Denial of Service vulnerability was found in the XWD decoder...
CVE-2005-1238
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...
DEBIAN-CVE-2005-0718
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...
CVE-2005-0718: Undefined Security Weakness
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...
squid -- DoS on failed PUT/POST requests vulnerability
The squid patches page notes: An inconsistent state is entered on a failed PUT/POST request making a high risk for segmentation faults or other strange errors...
DEBIAN-CVE-2004-1258
Buffer overflow in the putwords function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files...
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
This module exploits a format string vulnerability in the Nullsoft SHOUTcast server for Windows. The vulnerability is triggered by requesting a file path that contains format string specifiers. This vulnerability was discovered by Tomasz Trojanowski and Damian Put. Module Options msf use...
Debian DSA-077-1 : squid - remote DoS
Vladimir Ivaschenko found a problem in squid a popular proxy cache. He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squid is configured to restart itself on problems this is not a b...
Squid < 2.4.STABLE2 mkdir-only PUT Request DoS
Binary data 1524.prm...
CVE-2004-0723: Undefined Security Weakness
Microsoft Java virtual machine VM 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."...
CVE-2002-1544: Undefined Security Weakness
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. dot dot sequences in the commands 1 LIST ls, 2 mkdir, 3 put, or 4 get...
CVE-2001-0621
The CVE concerns Cisco Content Service (CSS) 11000 series switches with WebNS 4.01B23s or 4.10B13s. The FTP server on these devices allows an FTP user to read and write arbitrary files via GET or PUT commands. Root cause: an FTP service misconfiguration/logic flaw enabling unauthorized access to ...
CVE-2001-0843
CVE-2001-0843 affects the Squid proxy server (versions 2.4 and earlier). The flaw is triggered by a mkdir-only FTP PUT request, causing the daemon to crash and thus a remote denial of service. Connected advisories (Debian DSA-077-1, Mandrake MDKSA-2001:088, OpenVAS entries) corroborate remote DoS...
CVE-2001-0843
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...
CVE-2001-0621: Undefined Security Weakness
The FTP server on Cisco Content Service 11000 series switches CSS before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands...