19 matches found
GHSA-CX59-CP6C-9FR8 pyftpdlib vulnerable to allocation of resources without limits
The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...
pyftpdlib vulnerable to allocation of resources without limits
The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...
CVE-2007-6740
The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...
PYSEC-2010-24
The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...
CVE-2007-6740
CVE-2007-6740 affects pyftpdlib: FTPServer.py ftp_STOU does not limit attempts to find a unique filename, enabling remote authenticated users to cause a denial of service via STOU. Impact and fix: DoS via STOU as described; version before 0.2.0 is affected; upgrade to 0.2.0+ to remediate (exact p...
PT-2010-1238
Name of the Vulnerable Software and Affected Versions pyftpdlib versions prior to 0.2.0 Description The issue is related to the ftp STOU function in FTPServer.py, which does not limit the number of attempts to discover a unique filename. This could allow remote authenticated users to cause a deni...
CVE-2007-6740: Undefined Security Weakness
The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...
CVE-2001-1587
NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...
CVE-2001-1587
Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2001-1587: Improper Restriction of Operations within the Bounds of a Memory Buffer
NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...
Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities
The host is running Serv-U FTP Server, which is prone to Directory Traversal and Denial of Service Vulnerabilities. The flaws are due to, - error in handling 'STOU' FTP command. It can exhaust available CPU resources when exploited through a specially crafted argument vaule. - input validation...
CVE-2008-4500
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
Command injection
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
CVE-2008-4500: Improper Input Validation
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
vsftpd security and bug fix update
2.0.5-12 - fix CVE-2007-5962: vsftpd memory leak when denyfile option is set - Resolves: 423001 2.0.5-11 - add new option to log login failures based on user list - Resolves: 345791 - fix userconfigdir option - Resolves: 400921 - allow usernames starting with '' or '.' - Resolves: 386561 - fix th...
Serv-U FTP 4.x 5.x DoS
It is possible to crash the remote FTP server by sending it a STOU command. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2004-1675
CVE-2004-1675 affects Serv-U FTP Server 4.x–5.x. The vulnerability is triggered by the STOU command with an MS-DOS device name argument (e.g., COM1, LPT1, PRN, AUX), causing an application crash and a remote denial of service. Public references describe this as a remote DoS without user interacti...
Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS
Binary data 2275.prm...
CVE-2000-0645: Undefined Security Weakness
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...