63 matches found
CesarFTP v0.99g CPU OverLoad [Proof of concept]
Description : FTP server CesarFTP v0.99g has a security hole in the command CWD. This command allow somebody to rise up the CPU usage with the following command : USER user PASS pass CWD ..................per 10000.... The CPU utilisation will be equal to 100, the connection will not responding...
cesarDoS.txt
Description : FTP server CesarFTP v0.99g has a security hole in the command CWD. This command allow somebody to rise up the CPU usage with the following command : USER user PASS pass CWD ..................per 10000.... The CPU utilisation will be equal to 100%, the connection will not responding...
CesarFTP Multiple Vulnerabilities (OF, File Access, more)
The remote host is running CesarFTP, an FTP server for Windows systems. There are multiple flaws in this version of CesarFTP that could allow an attacker to execute arbitrary code on this host, or simply to disable this server remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2003-0329
CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges...
CVE-2003-0329
CVE-2003-0329 affects CesarFTP 0.99g, where user names and passwords are stored in plaintext in the settings.ini file. This design flaw could allow local users on the same host to gain privileges by reading credentials from that file. The CVE entry documents that plaintext credential disclosure i...
CVE-2003-0329
CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges...
Plaintext Password in Settings.ini of CesarFTP
Cesar FTP v0.99g latest version an FTP Server by http://www.aclogic.com/ it saves the ftp password in file: c:Program FilesCesarFTPsettings.ini in plaintext: .... Password= "lalala" Login= "megahz" Name= "megahz" .... Discovered by MegaHz www.megahz.org [email protected] www.cyhackportal.com...
CesarFTP settings.ini Authentication Credential Plaintext Disclosure
The remote host is running CesarFTP. Due to a design flaw in the program, the plaintext usernames and passwords of FTP users are stored in the file 'settings.ini'. Any user with an account on this host may read this file and use the password to connect to this FTP server. C Tenable Network...
CesarFTP 0.99 g - Remote Username Buffer Overrun
CesarFTP 0.99 g - Remote Username Buffer Overrun source: https://www.securityfocus.com/bid/7946/info A buffer overrun vulnerability has been reported for CesarFTP. The problem is said to occur when multiple 'USER' commands are processed within a single session. When the issue is triggered, it may...
CesarFTP 0.99 g - Remote CWD Denial of Service
CesarFTP 0.99 g - Remote CWD Denial of Service source: https://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server...
CesarFTP 0.99 g - Remote 'Username' Buffer Overrun
source: https://www.securityfocus.com/bid/7946/info A buffer overrun vulnerability has been reported for CesarFTP. The problem is said to occur when multiple 'USER' commands are processed within a single session. When the issue is triggered, it may be possible to overwrite sensitive locations in...
CesarFTP 0.99 g - Remote CWD Denial of Service
source: https://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging, effectively denying service to other...
CVE-2001-1335
CVE-2001-1335 involves CesarFTP, affected in versions 0.98b and earlier. The issue is a directory traversal vulnerability that allows remote authenticated users (including anonymous) to read arbitrary files by sending a GET request whose filename contains a ...%5c (modified dot dot). The provided...
CVE-2001-1336
CVE-2001-1336 affects CesarFTP (0.98b and earlier), where usernames and passwords are stored in plaintext in settings.ini. The underlying issue is plaintext credential storage, enabling any account on the host to read the file and gain privileges on the CesarFTP service. Connected sources corrobo...
CVE-2001-1335
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users such as anonymous to read arbitrary files via a GET with a filename that contains a ...%5c modified dot dot...
CVE-2001-1336
CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges...
Переполнение буфера в cesarFTP, Cerberus FTPd (buffer overflow)
Переполнение буфера во многих командах...
cesarFTP v0.98b 'HELP' buffer overflow
DESCRIPTION CesarFTP v0.98b is vulnerable to a buffer overflow when sending the HELP command followed by a very long string of characters. Example : Sending the following perl string : "HELP " . "A" x 1978 . "CCCCx00x0Dx0A" Happily reroutes the SERVER.EXE EIP to 43434343 "CCCC". This way, anyone...
CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption
CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption AFFECTED SYSTEMS CesarFTP v0.98b on Windows 9x / ME DESCRIPTION 1 Directory Traversal First, we need a directory where we have access to on the victim host... Or we can create one if we have enough rights ftp://127.0.0.1/...