Lucene search
+L

329 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/09 12:00 a.m.•6 views

CVE-2007-5300: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in the dologinloop function in libwzd-core/wzdlogin.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service daemon crash via a long USER command that triggers a stack-based buffer overflow. NOTE: some of these details are obtain...

5CVSS6.2AI score0.04906EPSS
SaveExploits1References3
myhack58
myhack58
•added 2007/10/07 12:00 a.m.•64 views

That one with Sam the FV key value to the hidden clone account method-vulnerability warning-the black bar safety net

| The principle is very simple Ah sam FV key value. focus on how to avoid detection Generally the detection of clone accounts is the detection of the sam inside there not the same FV. use this feature to bypass the detection. huh --- Step 1.net user allyesno freexploit /add&net localgroup...

7AI score
SaveExploits0
myhack58
myhack58
•added 2007/09/23 12:00 a.m.•30 views

Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net

On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...

0.5AI score
SaveExploits0
NVD
NVD
•added 2007/08/31 11:17 p.m.•22 views

CVE-2007-4646

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service daemon crash and probably execute arbitrary code via a long USER command...

10CVSS7.9AI score0.15523EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2007/08/31 11:00 p.m.•39 views

CVE-2007-4646

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service daemon crash and probably execute arbitrary code via a long USER command...

7.8AI score0.15523EPSS
SaveExploits1References6
securityvulns
securityvulns
•added 2007/03/25 12:00 a.m.•64 views

WarFTPd buffer overflow (outdated version)

Buffer overflow in USER command...

10CVSS5AI score0.50549EPSS
SaveExploits4Affected Software1
securityvulns
securityvulns
•added 2007/02/13 12:00 a.m.•58 views

Tiny FTPd buffer overflow

Buffer overflow in User command...

10CVSS3AI score0.08008EPSS
SaveExploits3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/12 12:00 a.m.•4 views

CVE-2006-7007: Undefined Security Weakness

Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service daemon crash via a long USER command, a different vector than CVE-2000-0133...

7.8CVSS5.8AI score0.03807EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2007/01/18 2:00 a.m.•34 views

CVE-2007-0338

Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log...

8.1AI score0.0474EPSS
SaveExploits1References3
EUVD
EUVD
•added 2007/01/18 2:00 a.m.•10 views

EUVD-2007-0340

Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log...

7.5CVSS8AI score0.0474EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/18 12:00 a.m.•4 views

CVE-2007-0338: Undefined Security Weakness

Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log...

7.5CVSS6.9AI score0.0474EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2007/01/15 12:00 a.m.•18 views

BolinTech DreamFTP (USER) Remote Buffer Overflow PoC

No description provided by source. / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX &...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/01/14 12:00 a.m.•37 views

BolinTech DreamFTP Server - 'USER' Remote Buffer Overflow (PoC)

/ BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX This is only a POC but code execution is possible usage: dreamftp.exe ip port Coded by Marsu / include...

7.5CVSS5.8AI score0.0474EPSS
SaveExploits1
NVD
NVD
•added 2006/12/27 12:28 a.m.•27 views

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

5CVSS6.8AI score0.03365EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/27 12:00 a.m.•4 views

CVE-2006-6751: Use of Externally-Controlled Format String

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

5CVSS5.9AI score0.03365EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2006/10/06 12:00 a.m.•22 views

eXtremail 1.x2.1 - Remote Format String (3)

eXtremail 1.x2.1 - Remote Format String 3 source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously...

0.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/25 12:00 a.m.•5 views

CVE-2006-4364: Undefined Security Weakness

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via long strings that contain '@' characters in the 1 USER and 2 APOP commands...

5CVSS6.6AI score0.57274EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
•added 2006/08/22 12:00 a.m.•17 views

ALT-N MDaemon POP Server < 9.06 USER / APOP Command Overflow

Binary data 3734.prm...

5CVSS7.3AI score0.57274EPSS
SaveExploits3References2
securityvulns
securityvulns
•added 2006/08/21 12:00 a.m.•52 views

Easy File Sharing FTP Server buffer overflow

Buffer overflow on oversized USER command...

4.2AI score
SaveExploits0References1Affected Software1
Check Point Advisories
Check Point Advisories
•added 2006/05/27 12:00 a.m.•19 views

Preemptive Protection against Cyrus IMAP Server USER Command Code Execution

Cyrus IMAP is an IMAP server developed and maintained by Carnegie Mellon University. A vulnerability has been identified in Cyrus IMAP in the processing of overly long USER commands. The vulnerability could be exploited by remote attackers to crash a vulnerable application or execute arbitrary...

5.1CVSS6.2AI score0.53333EPSS
SaveExploits14
Rows per page
Query Builder