554 matches found
CVE-2005-0419: Undefined Security Weakness
Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command...
CVE-2004-1883
Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...
PT-2004-2782 · Ipswitch · Ipswitch Ws Ftp Server
Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue involves multiple buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved by causing a large error string to be generated by the ALLO...
DEBIAN-CVE-2004-0274
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...
WS_FTP Server STAT Command Remote Overflow
According to its banner, the version of WSFTP running on the remote host has a buffer overflow vulnerability. Sending a 'STAT' command followed by a very long argument results in a buffer overflow. A remote attacker could exploit this to execute arbitrary code. C Tenable Network Security, Inc...
HP-UX ftpd glob() Expansion STAT Command Remote Overflow
Binary data 1819.prm...
CVE-2004-0340: Undefined Security Weakness
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long 1 LIST, 2 NLST, or 3 STAT commands...
WS_FTP Server vulnerable to buffer overflow when supplied overly long "STAT" command
Overview It has been reported that a vulnerability exists in the processing of a "STAT" command on WSFTP Servers versions 4.x and prior. Exploitation of this vulnerability may lead to an authenticated user executing arbitrary code with the elevated privileges of the server process. Description...
Ipswitch WS_FTP Server 3.44.0 - FTP Command Buffer Overrun
Ipswitch WSFTP Server 3.44.0 - FTP Command Buffer Overrun // source: https://www.securityfocus.com/bid/8542/info Ipswitch WSFTP Server is reported to be prone to buffer overruns when handling data supplied to the APPE and STAT FTP commands. An FTP user who supplies excessive input to these comman...
CVE-2002-2245
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session...
CVE-2002-2044
Cross-site scripting XSS vulnerability in xstatadmin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action...
ProFTPd 1.2.x - STAT Denial of Service
ProFTPd 1.2.x - STAT Denial of Service source: https://www.securityfocus.com/bid/6341/info A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will resu...
ProFTPd 1.2.x - 'STAT' Denial of Service
source: https://www.securityfocus.com/bid/6341/info A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will result in a denial of service condition...
Microsoft FTP Service STAT Globbing DoS
A copy of this document can be found online at: http://www.digitaloffense.net/msftpd/advisory.txt ----------------------------------------------------------------------------------------------- -- Microsoft FTP Service STAT Globbing DoS Summary: The Microsoft FTP service is vulnerable to a Denial...
def-2001-31
====================================================================== Defcom Labs Advisory def-2001-31 WSFTP server 2.0.3 Buffer Overflow Author: Andreas Junestam [email protected] Co-Author: Janne Sarendal [email protected] Release Date: 2001-10-05...
Ipswitch WS_FTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow
Ipswitch WSFTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow source: https://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP...
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings...
PT-2001-1477 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HPUX version 11 Description: The issue allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. This is due to a buffer overflow in the FTP serve...
CVE-2001-0248: Incorrect Calculation of Buffer Size
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings...
CVE-2001-0325: Undefined Security Weakness
Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command...