133 matches found
Shambala FTP Server does not adequately validate user input thereby allowing directory traversal
Overview Shambala FTP server has a directory traversal vulnerability in its handling of the CWD command. Description Shambala FTP server contains a directory traversal vulnerability in its handling of the CWD command. Attackers may exploit this vulnerability to read directories and files outside ...
CVE-2001-1193
The CVE-2001-1193 issue affects EFTP, specifically version 2.0.8.346, where the CWD (change working directory) command does not properly validate input, allowing authenticated local users to perform a directory traversal and read arbitrary directories/files on the server. This is a confirmed vuln...
CVE-2001-1193
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... modified dot dot in the CWD command...
CVE-2001-1193: Undefined Security Weakness
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... modified dot dot in the CWD command...
CVE-2002-0405: Undefined Security Weakness
Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . dot characters...
CVE-2002-0104
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...
CVE-2002-0104: Undefined Security Weakness
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...
CVE-2001-1031: Undefined Security Weakness
Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via 1 a .. dot dot in the ls/LIST command, or 2 a ... in the cd/CWD command...
CVE-2001-0966: Undefined Security Weakness
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the CD CWD command...
CVE-2001-0781
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands 1 CWD or 2 LIST...
CVE-2001-0758
Summary: CVE-2001-0758 describes a directory traversal vulnerability in Shambala 4.5 that allows remote attackers to escape the FTP root directory using the CWD command. The connected documents corroborate this description, identifying the affected product as Shambala 4.5 and the attack vector as...
CVE-2000-1194: Undefined Security Weakness
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the 1 USER or 2 CWD commands...
SpoonFTP Buffer Overflow Vulnerabilities
Strumpf Noir Society Advisories ! Public release ! -- -= SpoonFTP Buffer Overflow Vulnerabilities =- Release date: Thursday, May 31, 2001 Introduction: SpoonFTP is an ftp server from the hand of the makers of SpoonProxy for the various MS Windows incarnations. SpoonFTP is available from vendor...
Переполнение буфера в SpoonFTP (buffer overflow)
переполнения буфера в командах CWD и LIST...
CVE-2001-0296
CVE-2001-0296: A buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. Official descriptions (NVD) show high severity with network exploitability and complete impact on confidentiality, integrity, and availability. Connected documents ment...
CVE-2001-0296: Undefined Security Weakness
Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command...
CVE-2001-0294: Undefined Security Weakness
Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via 1 a .. dot dot in a GET command, or 2 a ... in a CWD command...
CVE-1999-0671
CVE-1999-0671 : The Red Hat security entry and other connected records confirm a buffer overflow in the ToxSoft NextFTP client triggered by the CWD command . The core issue is a vulnerability in processing the CWD command that can overflow a buffer, with public references noting this exact descri...