GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow source: https://www.securityfocus.com/bid/6642/info A buffer overflow condition has been reported for the CuteFTP application. The vulnerability is due to insufficient bounds checking performed on certain FTP command responses. If CuteFTP is...

CVE-2002-1979

WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causi...

Mollensoft Software Enceladus Server Suite 3.9 - 'FTP' Buffer Overflow

source: https://www.securityfocus.com/bid/6345/info Enceladus Server Suite is prone to a remotely exploitable buffer overflow vulnerability. It is possible to trigger this condition by supplying an overly long value for several FTP commands. To exploit this issue, the attacker must be able to...

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (2)

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service 2 source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not...

CVE-2002-0610

The CVE-2002-0610 vulnerability affects HP MPE/iX FTPSRVR (versions 6.0–7.0). The FTP server does not properly validate certain FTP commands, enabling a remote attacker to gain unauthorized access. HP/HP-UX bulletin HPSBMP0204-014 documents the issue and provides patches: 6.0 FTPGD91A, 6.5 FTPGD9...

CVE-2002-0610

Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges...

Выполнение команд в ftp4all (code execution)

команда exec позволяет выполнить любую команду с привилегиями ftp-демона...

Warftp 1.67b04 Directory Traversal

Overview: by adding a special formed argument to the dir command, it is possible to list the /../ directory. Detail: the command is the following: dir ./../.. Log: Verbindung mit 10.17.3.44 wurde hergestellt. 220- Jgaa's Fan Club FTP Service WAR-FTPD 1.67- 04 Ready 220 Please enter your user name...

ProFTPd 1.2 - 'SIZE' Remote Denial of Service

source: https://www.securityfocus.com/bid/2185/info A memory leak has been reported in all versions of ProFTPd. The SIZE FTP command causes the server to misallocate and leak small amounts of memory each time the command is executed. If a sufficient number of these commands are executed by the...

CVE-2000-0636

HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command...

DoS против принтеров HP

FTp-команда quote AAAAAAAAAAA cr приводит к отказу принтера...

VIGILANTE-2000004.txt

HP Jetdirect - Invalid FTP Command DoS Advisory Code: VIGILANTE-2000004 Release Date: July 19, 2000 Systems Affected: HP Jetdirect printers using firmware versions: - G.08.04 - H.08.05 - G.08.20 - H.08.20 Older firmware versions, prior to G.08.20 and H.08.20, are probably also vulnerable. THE...

HP JetDirect J3111A - Invalid FTP Command Denial of Service

source: https://www.securityfocus.com/bid/1491/info HP JetDirect firmware is vulnerable to a Denial of Service attack. JetDirect devices have an FTP service which fails to properly handle bad FTP commands sent with the ftp "quote" command. This causes the device to stop responding and possibly...

CVE-1999-0843

Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port...

CVE-1999-0349

A buffer overflow in the FTP list ls command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands...

FTP 'CWD ~root' Command Privilege Escalation

The remote FTP server is affected by a flaw that may allow a remote attacker to gain unauthorized privileges. An attacker can exploit this flaw by issuing a specially crafted request to the 'CWD root' command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10083;...