SurgeFTP 2.3a2 - Content-Length Null Pointer Denial of Service

SurgeFTP 2.3a2 - Content-Length Null Pointer Denial of Service source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the...

SurgeFTP 2.3a2 - 'Content-Length' Null Pointer Denial of Service

source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the server to copy data to a NULL pointer, which will crash the server...

Command injection

The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...

CVE-2007-3768

The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...

Cross site scripting

Cross-site scripting XSS vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE:...

CVE-2007-3769

Cross-site scripting XSS vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE:...

CVE-2007-3768

CVE-2007-3768 affects SurgeFTP 2.3a1, where the mirror mechanism processes PASV replies. A user‑assisted, remote FTP server can trigger a denial of service (restart) via a malformed PASV response. Exploitation specifics are not provided in the connected documents; CVSS base score is 8.5 (HIGH) fr...

CVE-2007-3768

The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...

CVE-2007-3769

CVE-2007-3769 affects SurgeFTP 2.3a1: a reflected XSS in the mirrored server management interface allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response, which is shown in the error message. The note indicates this could be leveraged for root acce...

CVE-2007-3769

Cross-site scripting XSS vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE:...

CVE-2007-3768: Undefined Security Weakness

The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...

CVE-2007-3769: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE:...

Netwin SurgeFTP 2.3a1 - SurgeFTPMGR.cgi Multiple Input Validation Vulnerabilities

Netwin SurgeFTP 2.3a1 - SurgeFTPMGR.cgi Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21534/info Netwin SurgeFTP is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. A successful exploit of these...

Netwin SurgeFTP 2.3a1 - 'SurgeFTPMGR.cgi' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/21534/info Netwin SurgeFTP is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data,...

CVE-2004-2318

The CVE-2004-2318 vulnerability affects SurgeFTP Server versions 1.0b to 2.2k1 and is triggered through the administrative interface, surgeftpmgr.cgi. A crafted request containing two percent (%) signs in the CMD parameter can cause a crash, resulting in a temporary denial of service. The availab...

CVE-2004-2318

The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...

CVE-2004-2318: Undefined Security Weakness

The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...

CVE-2005-1034

SurgeFTP 2.2m1 allows remote attackers to cause a denial of service application hang via the LEAK command...

CVE-2005-1034

SurgeFTP 2.2m1 allows remote attackers to cause a denial of service application hang via the LEAK command...

CVE-2005-1034

CVE-2005-1034 affects SurgeFTP 2.2m1 and allows a remote attacker to cause a denial of service (application hang) by abusing the non‑standard LEAK command. The underlying issue is how the LEAK command is processed, which can crash the ftp daemon. Public material in the connected sources notes tha...