15 matches found
EUVD-2000-0824
Malware in sbrugna...
EUVD-1999-0219
Malware in sbrugna...
EUVD-2001-0054
Malware in sbrugna...
CatSoft FTP Serv-U 2.5.x Brute-Force Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1860/info FTP Serv-U is an internet FTP server from CatSoft. FTP Serv-U contains an anti brute-force security feature which does not indicate whether an account is valid or not, after three unsuccessful login attempts a...
Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit
No description provided by source. !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on the system via directory traversal...
Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit
Exploit for unknown platform in category remote exploits ========================================================= Serv-U 7.4.0.1 MKD Create Arbitrary Directories Exploit ========================================================= !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability ...
CVE-2001-0054
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...
CVE-2001-0054
Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...
CVE-2001-0054
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...
CVE-2000-0837
CVE-2000-0837 affects FTP Serv-U 2.5e, where a remote attacker can cause a denial of service by sending a large number of null bytes to the FTP service. The underlying issue is the service crashing under大量 null-byte input (as documented in public advisories and the Nessus plugin for Serv-U 2.5e D...
CVE-2000-0837
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...
CVE-2000-0837
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...
CVE-1999-0219
CVE-1999-0219 is a buffer overflow in FTP Serv-U 2.5 that allows a remote authenticated user to cause a denial of service (crash) by sending a long CWD or LS command. Multiple sources in the connected documents corroborate the DoS via command handling overflow; the condition is triggered by exces...
ftp.serv-u.2.5.bof.txt
Date: Mon, 3 May 1999 06:16:38 +0200 From: Arne Vidstrom To: [email protected] Subject: Buffer overflows in FTP Serv-U 2.5 Hi, It looks like there are some buffer overflows in FTP Serv-U 2.5 the most recent version and I guess they are present in the versions before too, but I...
CVE-1999-0219
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service crash via a long 1 CWD or 2 LS list command...