XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability

Date of Discovery: 10-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server is a easy use FTP server Application. Denial of service vulnerability exists in XM Personal FTP...

XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability

No description provided by source. !/usr/bin/python import socket import sys def Usage: print "Usage: ./expl.py servip Username password\n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3...

XM Easy Personal FTP Server <= 5.8.0 DoS

Exploit for unknown platform in category dos / poc ======================================== XM Easy Personal FTP Server \n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3 sock =...

XM Easy Personal FTP Server 'LIST' And 'NLST' Command DoS Vulnerability

XM Easy Personal FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XM Easy Personal FTP Server 'LIST' And 'NLST' Command DoS Vulnerability

This host is running XM Easy Personal FTP Server and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbxmeasypersonalftpdosvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ XM Easy Personal FTP Server 'LIST' And 'NLST' Command DoS Vulnerability Authors: Sharath S Updated t...

Mandrake Security Advisory MDVSA-2009:272 (libmikmod)

The remote host is missing an update to libmikmod announced via advisory MDVSA-2009:272. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Winamp XM File Heap Buffer Overflow (CVE-2004-1896)

Winamp is a popular media player for the Windows operating system. There is a buffer overflow within the parsing of .XM media files that can lead to arbitrary code execution. There is a buffer overflow in the .XM file type decoded within Winamp, a popular media file player for the Windows Operati...

Mandriva Linux Security Advisory : libmikmod (MDVSA-2009:272-1)

Multiple vulnerabilities has been found and corrected in libmikmod : libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allo...

CVE-2009-3643: Undefined Security Weakness

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to the 1 LIST and 2 NLST commands, a differnt issue than CVE-2008-5626 and CVE-2006-5728...

XM Easy Personal FTP 5.8 DoS

Exploit for unknown platform in category remote exploits ============================ XM Easy Personal FTP 5.8 DoS ============================ Title: XM Easy Personal FTP 5.8 DoS CVE-ID: OSVDB-ID: Author: PLATEN Published: 2009-10-02 Verified: yes view source print? !/usr/bin/python print "\n"...

XM Easy Personal FTP 5.8 DoS

No description provided by source. !/usr/bin/python print "\n" print " Iranian Pentesters Home " print " Www.Pentesters.Ir " print " PLATEN - H.jafari - " print " XM Easy Personal FTP Server 5.8 Remote Denial Of Service " print " http://www.dxm2008.com/data/ftpserversetup.exe " print " author:...

SuSE 10 Security Update : libmikmod (ZYPP Patch Number 6034)

Specially crafted XM files or playing mod files with varying number of channels could crash applications using libmikmod. CVE-2009-0179 / CVE-2007-6720 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

[SECURITY] Fedora 11 Update: libmikmod-3.2.0-5.beta2.fc11

libmikmod is a library used by the mikmod MOD music file player for UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM, XM, ULT and IT...

openSUSE Security Update : libmikmod (libmikmod-570)

Specially crafted XM files or playing mod files with varying number of channels could crash applications using libmikmod CVE-2009-0179, CVE-2007-6720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

XM Easy Personal FTP Service Denial Of Service

!usr/bin/perl -w XM Easy Personal FTP Server 5.x allows remote attackers to cause a denial of service via a "HELP" or "TYPE" command with an overly long argument. Refer: http://secunia.com/advisories/35271/ Original advisory avaiable at:...

XM Easy Personal FTP Server多个FTP命令远程溢出漏洞

BUGTRAQ ID: 35239 XM Easy Personal FTP Server是一款简单易用的个人FTP服务器工具。 如果远程攻击者向XM Easy Personal FTP Server发送了超过4700字节的超长HELP或TYPE FTP命令的话，就可能触发缓冲区溢出，导致服务器崩溃。攻击者必须首先能够登录到服务器才能利用这个漏洞；此外由于没有覆盖寄存器，因此无法执行任意代码。 dxmsoft XM Easy Personal FTP Server 5.7.0 厂商补丁： dxmsoft -------...

[Security] XM Easy Personal FTP Server Multiple DoS vulnerabilities

XM Easy Personal FTP Server Multiple DoS vulnerabilities Credits: NeerajT of Nevis Labs http://www.nevisnetworks.com/services.php?id=10 Date of Discovery: 14-May-2009 Vendor: Dxmsoft URL: http://www.dxm2008.com/ Affected: XM Easy Personal FTP Server 5.7.0 Earlier versions may also be affected...

XM Easy Personal FTP Server DoS

/ XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int srvconnect; int sockaddrlong; struct sockaddrin sockaddrmysocket;...

ASP-Dev XM Event Diary Multiple Vulnerabilities

ASP-Dev XM Events Diary is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ASP-Dev XM Event Diary Multiple Vulnerabilities

The host is running ASP-Dev XM Events Diary and prone to multiple vulnerabilities. Vulnerabilities Insight: - Input passed to the 'cat' parameter in 'default.asp' and 'diaryviewC.asp' are not properly sanitised before being used in SQL queries. - Insufficient access control to the database file...