230 matches found
CVE-2003-1299
Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." triple dot manipulations to the CWD command...
cesarDoS.txt
Description : FTP server CesarFTP v0.99g has a security hole in the command CWD. This command allow somebody to rise up the CPU usage with the following command : USER user PASS pass CWD ..................per 10000.... The CPU utilisation will be equal to 100%, the connection will not responding...
CesarFTP 0.99 g - Remote CWD Denial of Service
source: https://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging, effectively denying service to other...
WarFTPd CWD/MKD Command Overflow
The version of the War FTP Daemon running on this host is vulnerable to a buffer overflow attack. This is due to improper bounds checking within the code that handles both the CWD and MKD commands. By exploiting this vulnerability, it is possible to crash the server. This script was written by Er...
Shambala FTP Server does not adequately validate user input thereby allowing directory traversal
Overview Shambala FTP server has a directory traversal vulnerability in its handling of the CWD command. Description Shambala FTP server contains a directory traversal vulnerability in its handling of the CWD command. Attackers may exploit this vulnerability to read directories and files outside ...
CVE-2001-1193
The CVE-2001-1193 issue affects EFTP, specifically version 2.0.8.346, where the CWD (change working directory) command does not properly validate input, allowing authenticated local users to perform a directory traversal and read arbitrary directories/files on the server. This is a confirmed vuln...
CVE-2001-1193
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... modified dot dot in the CWD command...
CVE-2002-0104
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...
CVE-2001-0758
Summary: CVE-2001-0758 describes a directory traversal vulnerability in Shambala 4.5 that allows remote attackers to escape the FTP root directory using the CWD command. The connected documents corroborate this description, identifying the affected product as Shambala 4.5 and the attack vector as...
CVE-2001-0781
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands 1 CWD or 2 LIST...
Переполнение буфера в SpoonFTP (buffer overflow)
переполнения буфера в командах CWD и LIST...
SpoonFTP Buffer Overflow Vulnerabilities
Strumpf Noir Society Advisories ! Public release ! -- -= SpoonFTP Buffer Overflow Vulnerabilities =- Release date: Thursday, May 31, 2001 Introduction: SpoonFTP is an ftp server from the hand of the makers of SpoonProxy for the various MS Windows incarnations. SpoonFTP is available from vendor...
CVE-2001-0296
CVE-2001-0296: A buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. Official descriptions (NVD) show high severity with network exploitability and complete impact on confidentiality, integrity, and availability. Connected documents ment...
CVE-1999-0671
CVE-1999-0671 : The Red Hat security entry and other connected records confirm a buffer overflow in the ToxSoft NextFTP client triggered by the CWD command . The core issue is a vulnerability in processing the CWD command that can overflow a buffer, with public references noting this exact descri...
CVE-1999-0671
Buffer overflow in ToxSoft NextFTP client through CWD command...
warftpd exploit?
WarFTPd 1.66 - 1.67 can be crashed due to an un-checked buffer for the CWD command, as this DoS exploit by eth0 from b0f shows. Now, it seems that the ret address can't be overwritten so it is probably a dynamic buffer, and therefore a heap or data overflow... I've seen some heap overflows agains...
CVE-2000-0131
CVE-2000-0131: War FTP Daemon 1.6x is vulnerable to a buffer overflow in the CWD/MKD command handling due to improper bounds checking. This can enable a remote attacker to crash the server (DoS) via long MKD/CWD commands. Documented in several sources (OpenVAS/Nessus entries), with CVSSv2 base sc...
CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...
Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service
// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...