CVE-2014-8579

TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session...

Design/Logic Flaw

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass th...

Command injection

The STARTTLS implementation in ftpparser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext...

CVE-2011-0762

The CVE-2011-0762 issue affects vsftpd prior to a patched release, where the vsftpd GET path handling of glob patterns in STAT commands is flawed. The function vsf_filename_passes_filter in ls.c can be triggered by crafted glob expressions in STAT commands across multiple FTP sessions, enabling r...

Beware : Php Shell By Trick (TeaMp0isoN) was a Back-doored Shell !

Beware : Php Shell By Trick TeaMp0isoN was a Back-doored Shell ! Today we got an email from Pak Cyber Army as shown above...,They Provide us a report also in attachment regarding the TeaMp0isoN Shell - Private Build BETA - v0.1 , Few days back Trick have submit us a own made private shell to...

CVE-2009-1675

CVE-2009-1675 is tied to ElectraSoft 32bit FTP 09.04.24, where a stack-based buffer overflow occurs when handling a long 227 reply to PASV. The vulnerability allows a remote FTP server to execute arbitrary code on the client system, with high impact (confidentiality, integrity, and availability p...

Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities

/ Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be exploited to read, modify, or delete arbitrary files from the affected...

Chilkat FTP ActiveX 2.0 - ChilkatCert.dll Insecure Method

Chilkat FTP ActiveX 2.0 - ChilkatCert.dll Insecure Method ======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author:...

Debian Security Advisory DSA 087-1 (wu-ftpd)

The remote host is missing an update to wu-ftpd announced via advisory DSA 087-1. OpenVAS Vulnerability Test $Id: deb0871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 087-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

XAMPP - Insecure Default Password Disclosure

XAMPP - Insecure Default Password Disclosure source: https://www.securityfocus.com/bid/13131/info An insecure default password disclosure vulnerability affects XAMPP. This issue is due to a failure of the application to properly secure access to default passwords. An attacker may leverage this...

HP-UX PHNE_29460 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running ftp where the vulnerability could be exploited remotely to allow unauthorized access. HPSBUX01050 SSRT3456 - A potentia...

Snug Server FTP directory traversal

No description provided...

CVE-2004-1294

The CVE-2004-1294 issue affects tnftp (2003-08-25 build) where the mget function in cmds.c does not validate server-supplied filenames containing /, allowing a remote FTP server to overwrite arbitrary files on the client system. This could occur when processing responses that include such filenam...

Hydra: FTP

This plugin runs Hydra to find FTP accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

GuildFTPd Long SITE Command Overflow

The remote ftp server seems to be vulnerable to a denial of service attack through the SITE command when handling specially long requests. An attacker can exploit this flaw in order to crash the affected service or possibly execute arbitrary code. C Tenable Network Security, Inc...

CVE-2004-0296

TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection...

Default Password for FTP 'admin' Account

The account 'admin' on the remote FTP server has the password 'password'. An attacker may leverage this to gain access to the affected system and launch further attacks against it. If the remote host is an NB1300 router, this would allow an attacker to steal the WAN credentials of the user, or ev...

CVE-2003-0203

**CVE-2003-0203 is a confirmed buffer overflow in moxftp up to version 2.2 (and xftp) that allows a remote FTP server to execute arbitrary code by sending a long FTP banner. The root cause is insufficient bounds checking in the FTP banner handling. Debian’s DSA-281 and related advisories document...

SunFTP GET Request Remote Overflow

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands by sending more than 2100 characters to the server. This script was written by Xue Yong Zhi See the Nessus Scripts License for details Changes by Tenable: - Revised plugi...

SECURITY.NNOV: accessing cookies via ftp

Hello bugtraq, Article below describes a vulnerability that can be treated as either software vulnerability or specific server configuration problem depending on your point of view. Many servers on Internet are affected by this problem though. Topic: accessing cookies via ftp Affected Software: a...