Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)

Exploit for windows platform in category remote exploits ============================================================ Femitter FTP Server 1.x Multiple Vulnerabilities post auth ============================================================ / Femitter Server FTP 1.x Multiple Vulnerability...

Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit

Exploit for windows platform in category remote exploits ============================================================ Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit ============================================================ / Sysax Multi Server v4.3 Remote Delete Files. Server FTP...

Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit

Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit / Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FT...

Directory traversal

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031

The CVE-2009-1031 issue affects Rhino Software Serv-U File Server versions 7.0.0.1 through 7.4.0.1. The vulnerability is a directory traversal in the FTP server that allows an unauthenticated remote attacker to create arbitrary directories via a MKD request using a backslash-dot-dot sequence (..)...

CVE-2009-1031

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

Sql injection

The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service service hang via a large number of SMNT commands without an argument...

CVE-2009-0967

Affected software: Serv-U FTP Server (versions 7.0.0.1–7.4.0.1). Vulnerability: Denial of Service caused by remote authenticated users sending a large number of SMNT commands without an argument, leading to a service hang. Root cause / impact: Not explicitly detailed beyond the DoS condition; imp...

CVE-2009-0967

The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service service hang via a large number of SMNT commands without an argument...

Xlight FTP Server 3.2 - user SQL Injection

Xlight FTP Server 3.2 - user SQL Injection source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Serv-U FTP服务器(7.4.0.1) MKD命令目录遍历漏洞

BUGTRAQ ID: 34125 Serv-U FTP是一款FTP服务程序。 如果远程攻击者向Serv-U FTP服务器发送了包含有“\..”字符序列的MKD请求的话，就可以通过目录遍历攻击绕过FTP root限制在系统上创建任意目录。 RhinoSoft Serv-U 7.4.0.1 厂商补丁： RhinoSoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.serv-u.com/ http://sebug.net/exploit/10827/...

Xlight FTP Server 3.2 - 'user' SQL Injection

source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Serv-U FTP服务器SMNT命令远程拒绝服务漏洞

BUGTRAQ ID: 34127 Serv-U FTP是一款FTP服务程序。 如果远程攻击者向Serv-U FTP服务器发送特制SMNT请求的话，就可以导致服务器停止响应。 RhinoSoft Serv-U 7.4.0.1 厂商补丁： RhinoSoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.serv-u.com/ http://www.sebug.net/exploit/5979/...

RhinoSoft Serv-U FTP Server 7.4.0.1 - SMNT (Authenticated) Denial of Service

RhinoSoft Serv-U FTP Server 7.4.0.1 - SMNT Authenticated Denial of Service !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web:...

RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories

RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on th...

RhinoSoft Serv-U FTP Server 7.4.0.1 - 'SMNT' (Authenticated) Denial of Service

!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web: http://www.shell-storm.org use IO::Socket; print "+ Author : Jonathan Salwan \n";...

Serv-U 7.4.0.1 Denial Of Service

!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web: http://www.shell-storm.org use IO::Socket; print "+ Author : Jonathan Salwan \n";...

GuildFTPd DELE命令目录遍历漏洞

BUGTRAQ ID: 34079 GuildFTPD是一个Windows平台下的免费FTP服务器。 GuildFTPd没有正确地处理FTP DELE请求，如果远程攻击者在向服务器所提交的DELE命令中包含有特制的“..”字符序列的话，就可以通过目录遍历攻击绕过FTP root删除系统上的任意文件。 DrPhibez and Nitro187 Guild FTPD v0.999.14 厂商补丁： DrPhibez and Nitro187 --------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

ProFTPD: Multiple vulnerabilities

Background ProFTPD is an advanced and very configurable FTP server. Description The following vulnerabilities were reported: Percent characters in the username are not properly handled, which introduces a single quote character during variable substitution by modsql CVE-2009-0542. Some invalid,...