CVE-1999-0671

Buffer overflow in ToxSoft NextFTP client through CWD command...

CVE-1999-0671: Undefined Security Weakness

Buffer overflow in ToxSoft NextFTP client through CWD command...

warftpd exploit?

WarFTPd 1.66 - 1.67 can be crashed due to an un-checked buffer for the CWD command, as this DoS exploit by eth0 from b0f shows. Now, it seems that the ret address can't be overwritten so it is probably a dynamic buffer, and therefore a heap or data overflow... I've seen some heap overflows agains...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service

// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

FTPd CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...

CVE-1999-0362

The CVE is for WS_FTP Server DoS via the CWD command. Affected software is WS_FTP Server; vulnerability arises when a CWD command with a long argument crashes the service, leading to a denial of service (availability impact). Public references describe this as a remote DoS issue with the CWD hand...

CVE-1999-0082

CWD root command in ftpd allows root access...

CVE-1999-0362

WSFTP server remote denial of service through cwd command...

CVE-1999-0362: Undefined Security Weakness

WSFTP server remote denial of service through cwd command...

CVE-1999-0671

Buffer overflow in ToxSoft NextFTP client through CWD command...

ToxSoft NextFTP 1.82 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/572/info ToxSoft's shareware FTP client, NextFTP, contains an unchecked buffer in the code that parses CWD command replies. If the FTP server's reply contains the exploit code, arbitrary commands can be run on the client machine...

Multiple FTP Server QUOTE CWD Command Home Path Disclosure

It is possible to determine the full path of the home directory of the 'ftp' user by issuing the 'CWD' command. An attacker can exploit this to determine where to put a .rhost file using other security flaws. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10087;...

PT-1997-1093 · Ftp · Ftp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. Recommendations: At the moment, there is no information about a newer version th...