RaidenFTPD MLST命令远程栈溢出漏洞

BUGTRAQ ID: 31741 雷电FTPD是一套全功能的FTP服务器软件。 RaidenFTPD没有正确地处理用户所请求的超长目录名，如果远程攻击者发送了特制的CWD和MLST命令组合的话，就可以触发栈溢出，导致执行任意指令。 Raiden Professional Servers RaidenFTP 2.4.3615 厂商补丁： Raiden Professional Servers --------------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

RaidenFTPD 'MLST'命令远程拒绝服务漏洞

BUGTRAQ ID: 31741 CNCAN ID：CNCAN-2008101407 RaidenFTPD是一款FTP服务程序。 RaidenFTPD处理'MLST'命令存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交特殊构建的'MLST'命令，可导致应用程序崩溃。 Raiden Professional Servers RaidenFTPD 2.4 3620 Raiden Professional Servers RaidenFTPD 2.4 .2241 Raiden Professional Servers RaidenFTPD 2.4 .2240...

RaidenFTPD 2.4 build 3620 Remote Denial of Service Exploit

No description provided by source. RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn host login password\n" print "Note: anonymous is enought"...

RaidenFTPD 2.4 build 3620 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== RaidenFTPD 2.4 build 3620 Remote Denial of Service Exploit ========================================================== RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -...

RaidenFTPd 2.4 build 3620 - Remote Denial of Service

RaidenFTPd 2.4 build 3620 - Remote Denial of Service RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn \n" print "Note: anonymous is enought" d...

raiden-dos.txt

RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn \n" print "Note: anonymous is enought" def dosithostname, username, passwd: sock =...

RaidenFTPd 2.4 build 3620 - Remote Denial of Service

RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn \n" print "Note: anonymous is enought" def dosithostname, username, passwd: sock =...

Null pointer dereference

Multiple unspecified vulnerabilities in IXceedCompression in XceddZipLib RaidenFTPD.dll in RaidenFTPD 2.4 allow remote attackers to cause a denial of service crash via unspecified vectors involving the 1 CalculateCrc, 2 Compress, and 3 Uncompress functions, which result in a NULL pointer...

CVE-2007-2179

Affected software: RaidenFTPD 2.4 with IXceedCompression in XceddZipLib (RaidenFTPD.dll). Vulnerability: Multiple unspecified vulnerabilities in IXceedCompression may cause a denial of service (crash) via a NULL pointer dereference in the functions CalculateCrc, Compress, and Uncompress. Impact: ...

CVE-2007-2179

Multiple unspecified vulnerabilities in IXceedCompression in XceddZipLib RaidenFTPD.dll in RaidenFTPD 2.4 allow remote attackers to cause a denial of service crash via unspecified vectors involving the 1 CalculateCrc, 2 Compress, and 3 Uncompress functions, which result in a NULL pointer...

RaidenFTPD Unauthorized File Access flaw

The remote host is running the RaidenFTPD FTP server. The remote version of this software is vulnerable to a directory traversal flaw. A malicious user could exploit it to obtain read access to the outside of the intended ftp root. OpenVAS Vulnerability Test $Id: raidenftpdfileaccess.nasl 8023...

RaidenFTPD Directory Traversal flaw

The remote host is running the RaidenFTPD FTP server. The remote version of this software is vulnerable to a directory traversal flaw. A malicious user could exploit it to gain read and write access to the outside of the intended ftp root. OpenVAS Vulnerability Test $Id: raidenftpddirtraversal.na...

RaidenFTPD < 2.1 build 952 Directory Traversal Vulnerability

RaidenFTPD is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RaidenFTPD < 2.4 build 2241 Directory Traversal Vulnerability

RaidenFTPD is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

raidenftpdTraverse.txt

Product : RaidenFTPD Affected Versions : quote site urlget file://..\boot.ini 550 site urlget failed : hacking attempt , you have been logged. ftp quote site urlget file:/..\boot.ini 220 site urlget : downloading file:/..\boot.ini-boot.ini ftp ls 200 Port command ok. 150 Opening ASCII data...

CVE-2005-1480

Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\" dot dot backslash in the urlget site command...

CVE-2005-1480

Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\" dot dot backslash in the urlget site command...

CVE-2005-1480

CVE-2005-1480 concerns RaidenFTPD; multiple sources converge on a directory traversal flaw in the RaidenFTPD FTP server prior to 2.4.2241. An attacker can read arbitrary files outside the FTP root by supplying a ".." sequence in the urlget site command. Impact is read access to files via remote u...

RaidenFTPD Multiple Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability. An authenticated attacker could exploit this to read and write arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description...

RaidenFTPD urlget Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability that could allow an attacker to read arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18225; scriptversion"1.18"...