CVE-2002-1893: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message...

KMiNT21.txt

Summary: Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 http://www.goldenftpserver.com/ Details: Passing an overly long username parameter to the FTP server causes the EIP register to be overwritten after the USER/PASS login sequence is completed. Once this has been do...

CVE-2005-1485

Golden FTP Server Pro 2.52 is affected by an information-disclosure vulnerability: when a GET request targets a non-existent file, the FTP error response reveals the absolute path of the server. This is a server-side path disclosure issue that can aid an attacker in mapping the environment. The p...

CVE-2005-1485: Undefined Security Weakness

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...

CVE-2005-1484: Undefined Security Weakness

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit ========================================================= / Golden FTP Server Pro Remote Buffer Overflow Exploit Bug...

Golden FTP Server Pro 2.52 - Remote Buffer Overflow (1)

/ Golden FTP Server Pro Remote Buffer Overflow Exploit Bug Discovered by Reed Arvin http://reedarvin.thearvins.com Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan and metasploit Usage:exploit / / Vulnerable Versions: Golden FTP Server P...

Golden FTP Server Pro 2.52 - Remote Buffer Overflow (1)

Golden FTP Server Pro 2.52 - Remote Buffer Overflow 1 / Golden FTP Server Pro Remote Buffer Overflow Exploit Bug Discovered by Reed Arvin http://reedarvin.thearvins.com Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan and metasploit...

Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit (3rd)

No description provided by source. / \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shit / 'coz ftpd won't...

Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit (2nd)

No description provided by source. / Golden FTP Server Pro remote stack BOF exploit author : c0d3r "kaveh razavi" [email protected] [email protected] risk : highly critical vender status : no patch released , all targets are vuln package : golden-ftp-server-pro 2.5.0.0 and prior advisory :...

Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 (10.04.2005)

Summary: Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 http://www.goldenftpserver.com/ Details: Passing an overly long username parameter to the FTP server causes the EIP register to be overwritten after the USER/PASS login sequence is completed. Once this has been do...

CVE-2005-1282

CVE-2005-1282 affects ArGoSoft Mail Server Pro 1.8.7.6, with multiple XSS vulnerabilities allowing remote injection via (1) IMG src, (2) webmail user settings, or (3) address book input. The connected sources confirm XSS exposure and affected component, but do not provide patch/version remediatio...

CVE-2005-1283

Summary : CVE-2005-1283 describes multiple directory traversal vulnerabilities in ArGoSoft Mail Server Pro 1.8.7.6. Remote authenticated users can read arbitrary files via the UIDL parameter to the msg script or copy/move the user’s .eml file to arbitrary locations via the delete script. This is ...

CVE-2005-1284: Undefined Security Weakness

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request...

CVE-2005-1282: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2005-1283: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

CVE-2005-0919

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting XSS attacks...

CVE-2005-0919

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting XSS attacks...

CVE-2005-0919

CVE-2005-0919 affects Adventia Chat 3.1 and Adventia Server Pro 3.0. The flaw allows remote attackers to inject arbitrary web script/HTML into the chat space, enabling cross-site scripting (XSS) among users. Reported impact is MEDIUM (CVSS 2.0: AV:N/AC:M/Au:N/C:N/I:P/A:N); exploitation would not ...

CVE-2005-0919: Undefined Security Weakness

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting XSS attacks...