WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)

!/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg =...

CVE-2004-1642

CVE-2004-1642 affects WFTPD Pro Server 3.21. A remote authenticated user can trigger a denial of service (crash) by sending a sequence of long MLIST commands. The provided documents confirm the affected product/version and the impact (DoS) but do not disclose the underlying root cause details or ...

CVE-2004-1642

WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service crash via a series of long MLIST commands...

CVE-2004-0342

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...

CVE-2004-0340

Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long 1 LIST, 2 NLST, or 3 STAT commands...

CVE-2004-0341

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte newline is sent, which allows local users to cause a denial of service CPU consumption by continuing to send a long command that does not contain a newline...

[vulnwatch] WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability

vulnwatch WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability www.cnhonker.com Security Advisory Advisory Name: WFTPD Pro Server 3.21 MLST Command Denial of Service Vulnerability Release Date: 08/30/2004 Affected version: WFTPD Pro Server 3.21 Release 3 Author: lion [email protected]...

WFTPD Pro Server 3.21 - MLST Remote Denial of Service

WFTPD Pro Server 3.21 - MLST Remote Denial of Service / ----------------------------------------------------------------------- wftpd.c - WFTPD Pro Server 3.21 MLST DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : lion cnhonker net : www cnhonker com Date : 2004-08-30...

WFTPD Pro Server 3.21 MLST Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== WFTPD Pro Server 3.21 MLST Remote Denial of Service Exploit =========================================================== /...

WFTPD Pro Server 3.21 MLST Remote Denial of Service Exploit

No description provided by source. / ----------------------------------------------------------------------- wftpd.c - WFTPD Pro Server 3.21 MLST DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : lion cnhonker net : www cnhonker com Date : 2004-08-30...

WFTPD Pro Server 3.21 - MLST Remote Denial of Service

/ ----------------------------------------------------------------------- wftpd.c - WFTPD Pro Server 3.21 MLST DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : lion cnhonker net : www cnhonker com Date : 2004-08-30...

CVE-2004-1642

WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service crash via a series of long MLIST commands...

CVE-2004-0342

CVE-2004-0342 affects WFTPD Pro Server 3.21 Release 1 when XeroxDocutech is enabled. A denial-of-service (crash) can be triggered by local users issuing MKD or XMKD commands that build an absolute path of 260 characters, which overwrites a cookie with a null character—likely due to an off-by-one ...

CVE-2004-0341

CVE-2004-0341 affects WFTPD Pro Server 3.21 Release 1 . The flaw arises because the server allocates memory for a command until a 0x0A (newline) is received, enabling a local attacker to cause a denial of service (CPU consumption) by sending a long command that never contains a newline. The NVD e...

CVE-2004-0340

CVE-2004-0340 corresponds to a stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10. The vulnerability allows local users to execute arbitrary code by sending abnormally long commands in LIST, NLST, or STAT. This is a lo...

CVE-2004-0342

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...

CVE-2004-0341

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte newline is sent, which allows local users to cause a denial of service CPU consumption by continuing to send a long command that does not contain a newline...

CVE-2004-0340

Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long 1 LIST, 2 NLST, or 3 STAT commands...