FileZilla FTP Server Admin Interface Denial of Service

This module triggers a Denial of Service condition in the FileZilla FTP Server Administration Interface in versions 0.9.4d and earlier. By sending a procession of excessively long USER commands to the FTP Server, the Administration Interface FileZilla Server Interface.exe when running, will...

Titan FTP Server 6.26.630 SITE WHO DoS

The Titan FTP server v6.26 build 630 can be DoS'd by issuing "SITE WHO". You need a valid login so you can send this command. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Titan FTP Server...

FileZilla FTP Server Malformed PORT Denial of Service

This module triggers a Denial of Service condition in the FileZilla FTP Server versions 0.9.21 and earlier. By sending a malformed PORT command then LIST command, the server attempts to write to a NULL pointer. This module requires Metasploit: https://metasploit.com/download Current source:...

XM Easy Personal FTP Server 5.6.0 NLST DoS

This module is a port of shinnai's script. You need a valid login, but even anonymous can do it as long as it has permission to call NLST. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'XM Eas...

Victory FTP Server 5.0 LIST DoS

The Victory FTP Server v5.0 can be brought down by sending a very simple LIST command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Victory FTP Server 5.0 LIST DoS', 'Description' = %q The...

[SECURITY] Fedora 10 Update: proftpd-1.3.1-8.fc10

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 9 Update: proftpd-1.3.1-8.fc9

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

FreeBSD-SA-09:01.lukemftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:01.lukemftpd Security Advisory The FreeBSD Project Topic: Cross-site request forgery in lukemftpd8 Category: core Module: lukemftpd Announced: 2009-01-07...

BulletProof FTP客户端.bps文件处理栈溢出漏洞

BUGTRAQ ID: 33024 BulletProof FTP Server之前名为G6 FTP Server，是一款全功能的Windows平台FTP服务器软件。 如果用户受骗使用BulletProof FTP Server的客户端加载了恶意的.bps文件的话，就可能触发栈溢出，导致执行任意指令。 BulletProof FTP Client BulletProof Software -------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bpftp.com/...

WinFTP Server PASV Command Denial of Service Vulnerability

This host is running WinFTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodwinftpserverdosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ WinFTP Server PASV Command Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2008 SecPod,...

XM Easy Personal FTP Server Denial of Service Vulnerability

This host is running XM Easy FTP Personal FTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxmeasyftpdosvuln.nasl 5657 2017-03-21 11:08:08Z cfi $ XM Easy Personal FTP Server Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 20...

FreeBSD-SA-08:12.ftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:12.ftpd Security Advisory The FreeBSD Project Topic: Cross-site request forgery in ftpd8 Category: core Module: ftpd Announced: 2008-12-23 Credits: Maksymilian...

Authentication flaw

Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name...

CVE-2008-5666

WinFTP FTP Server 2.3.0, when passive aka PASV mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command...

Command injection

WinFTP FTP Server 2.3.0, when passive aka PASV mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command...

CVE-2008-5666

CVE-2008-5666 affects WinFTP Server 2.3.0. In PASV mode, a sequence of FTP sessions with an invalid NLST -1 can trigger a denial of service. Public sources (e.g., PacketStorm Metasploit PoC, OpenVAS entries) corroborate a PASV/NLST DoS vector but do not provide vendor-issued fixes within the supp...

CVE-2008-5666

WinFTP FTP Server 2.3.0, when passive aka PASV mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command...

CVE-2008-5626

XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument...

Command injection

XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument...

CVE-2008-5626

CVE-2008-5626 affects XM Easy Personal FTP Server via NLST DoS. Public details in connected docs show vulnerable versions 5.6.0 and 5.7.0 can be crashed by a crafted NLST argument (e.g., -1); disclosure notes authenticated access is required (per initial description), with related Metasploit modu...