CVE-2001-1193

The CVE-2001-1193 issue affects EFTP, specifically version 2.0.8.346, where the CWD (change working directory) command does not properly validate input, allowing authenticated local users to perform a directory traversal and read arbitrary directories/files on the server. This is a confirmed vuln...

CVE-2001-1193

Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... modified dot dot in the CWD command...

CVE-2002-0104

AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...

CVE-2001-0758

Summary: CVE-2001-0758 describes a directory traversal vulnerability in Shambala 4.5 that allows remote attackers to escape the FTP root directory using the CWD command. The connected documents corroborate this description, identifying the affected product as Shambala 4.5 and the attack vector as...

CVE-2001-0781

Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands 1 CWD or 2 LIST...

SpoonFTP Buffer Overflow Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= SpoonFTP Buffer Overflow Vulnerabilities =- Release date: Thursday, May 31, 2001 Introduction: SpoonFTP is an ftp server from the hand of the makers of SpoonProxy for the various MS Windows incarnations. SpoonFTP is available from vendor...

Переполнение буфера в SpoonFTP (buffer overflow)

переполнения буфера в командах CWD и LIST...

CVE-2001-0296

CVE-2001-0296: A buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. Official descriptions (NVD) show high severity with network exploitability and complete impact on confidentiality, integrity, and availability. Connected documents ment...

CVE-1999-0671

CVE-1999-0671 : The Red Hat security entry and other connected records confirm a buffer overflow in the ToxSoft NextFTP client triggered by the CWD command . The core issue is a vulnerability in processing the CWD command that can overflow a buffer, with public references noting this exact descri...

CVE-1999-0671

Buffer overflow in ToxSoft NextFTP client through CWD command...

warftpd exploit?

WarFTPd 1.66 - 1.67 can be crashed due to an un-checked buffer for the CWD command, as this DoS exploit by eth0 from b0f shows. Now, it seems that the ret address can't be overwritten so it is probably a dynamic buffer, and therefore a heap or data overflow... I've seen some heap overflows agains...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service

// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

FTPd CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...

CVE-1999-0362

The CVE is for WS_FTP Server DoS via the CWD command. Affected software is WS_FTP Server; vulnerability arises when a CWD command with a long argument crashes the service, leading to a denial of service (availability impact). Public references describe this as a remote DoS issue with the CWD hand...

CVE-1999-0362

WSFTP server remote denial of service through cwd command...

CVE-1999-0082

CWD root command in ftpd allows root access...

CVE-1999-0671

Buffer overflow in ToxSoft NextFTP client through CWD command...

ToxSoft NextFTP 1.82 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/572/info ToxSoft's shareware FTP client, NextFTP, contains an unchecked buffer in the code that parses CWD command replies. If the FTP server's reply contains the exploit code, arbitrary commands can be run on the client machine...