Microsoft IIS 4.05.0 - FTP Denial of Service (MS01-026)

Microsoft IIS 4.05.0 - FTP Denial of Service MS01-026 source: https://www.securityfocus.com/bid/2717/info Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing...

Microsoft IIS 4.0/5.0 - FTP Denial of Service (MS01-026)

source: https://www.securityfocus.com/bid/2717/info Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing specially placed wildcard sequences, the...

Cartfix Secret Backdoor Patch tool for cart32

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Tool Release Name: Cartfix Secret Backdoor Patch tool Release Date: April 27, 2000 Application: Cart32 Shopping Cart Program Platform: Win32 Severity: An attacker can execute commands on the web server and modify admin passwor...

Re: Denial of Service in Xitami webserver all versions...

Xitami also has an overflow in one of the default example CGI programs that it comes with. http://server.com/cgi-bin/TESTCGI.EXE bla bla bla overflow argv fun. Signed, Marc eEye Digital Security http://www.eEye.com "Its a bullshit, three ring, circus sideshow. The only way to fix it is to flush i...

Denial of Service in Xitami webserver all versions up to v2.5b1 for Windows.

Anyone can remotely crash Xitami webserver by sending simple GET command. On remote side will be: Assertion Failed! Module: D:ImatixDevelopSmtSmthttpl.c , line 745 All you need to do is just telnet to remote computer and execute GETspaceenterenter command. Also Xitami will crash if you'll execute...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0022

Technical details about CVE-2000-0022 are not publicly provided in the supplied documents. Monitor for updates from referenced sources; only the basic description about Lotus Domino CGI-bin anonymous access is available.

CVE-2000-0114

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory...

CVE-2000-0114

CVE-2000-0114 affects FrontPage Server Extensions. It enables unauthenticated remote disclosure of the anonymous account name via an RPC POST to shtml.dll in the /_vti_bin/ virtual directory. The issue stems from information disclosure in FrontPage Server Extensions; no exploitation details are p...

CVE-1999-0527

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...

CVE-1999-0527

CVE-1999-0527 describes insecure permissions for data in an anonymous FTP account, allowing world-writable root directories, access to the password file, or overwriting executable commands (e.g., ls). The issue is documented across multiple sources (Red Hat CVE page and OpenVAS NASL) with the roo...

CVE-1999-0497

Technical details such as affected product, versions, root cause, and remediation are not publicly provided in the supplied documents. Monitor for updates.

CVE-1999-0497

Anonymous FTP is enabled...

CVE-2000-0114

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory...

PT-2000-1102 · Microsoft · Shtml.Dll +1

Name of the Vulnerable Software and Affected Versions: Frontpage Server Extensions affected versions not specified Description: The issue allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the / vti bin/ virtual directory. Recommendation...

Fortech Proxy+ 2.30 - Remote Administration

source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can accomodate for anonymous packet...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

FTPd CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...

WU-FTPD 2.4.2/2.5 .0/2.6.0 - Remote Format String Stack Overwrite (1)

// source: https://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a very serious remote attack in the SITE EXEC implementation. Becau...

WU-FTPD 2.4.22.5 .02.6.0 - Remote Format String Stack Overwrite (1)

WU-FTPD 2.4.22.5 .02.6.0 - Remote Format String Stack Overwrite 1 // source: https://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a...