Path traversal

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1268

CVE-2008-1268 affects the Linksys WRT54G v7 router running firmware 7.00.1. The FTP server fails to verify authentication credentials, allowing remote attackers to establish an FTP session by supplying an arbitrary username and password. This directly enables unauthorized access to FTP functional...

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

CVE-2008-1221 describes an absolute path traversal in the FTP server of MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (eScan Server) 9.0.742.1. The vulnerability allows a remote attacker to read arbitrary files via an absolute pathname in the RETR (get) command. Affec...

Microworld eScan Server 9.0.742 - Directory Traversal

Microworld eScan Server 9.0.742 - Directory Traversal source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access...

Microworld eScan Server 9.0.742 - Directory Traversal

source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside of the FTP server root...

JVN#10056705 FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers

The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer series are digital multifunction copiers and printers. Some of these products contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server...

CVE-2008-1079

The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges...

Hardcoded credentials

The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges...

liveboxftp-overflow.txt

Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS Discovered by: 0in from DaRk-CodeRs Security & Programming Group! http://dark-coders.4rh.eu DESCRIPTION: Livebox tested on polish "Neostrada TP Livebox" is vulnerability to remote but from local network, because firewall working.. buffer...

Livebox routers format string vulnerability

Format string vulnerability in built-in ADI Convergence Galaxy FTP Server...

Galaxy FTP Server 1.0 (Neostrada Livebox DSL Router) - Denial of Service

Galaxy FTP Server 1.0 Neostrada Livebox DSL Router - Denial of Service / Discovered bY 0in From DaRk-CodeRs Programming & Security Group! Contact: 0indotemailatgmaildotcom HOMEPAGE: http://dark-coders.4rh.eu DESCRIPTION: Livebox router is vulnerability to remote but from local network, because...

Galaxy FTP Server 1.0 (Neostrada Livebox DSL Router) DoS Exploit

Exploit for linux platform in category dos / poc ================================================================ Galaxy FTP Server 1.0 Neostrada Livebox DSL Router DoS Exploit ================================================================ / Discovered bY 0in From DaRk-CodeRs Programming &...

ADI Convergence Galaxy FTP Server Password - Remote Denial of Service

// source: https://www.securityfocus.com/bid/28066/info ADI Convergence Galaxy FTP Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected application,...

Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials

Title: Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials Vendor: Beehive Software Vendor URL: http://www.thebeehive.com/ Affected File: http://host/sfcommon/SendFile.jar Vendor Contact Date: 7/26/2007 Vendor Response: None Workaround: The simplest way to protect against...

Canon digital multifunction copiers FTP bounce vulnerability

Overview Some models of Canon digital multifunction copiers are vulnerable to the FTP bounce attack. Description From the Problems With The FTP PORT Command document:The FTP Bounce Attack To conform with the FTP protocol, the PORT command has the originating machine specify an arbitrary destinati...

SurgeFTP FTP server DoS

Administration web interface Content-Length memory consumption...

NULL pointer in SurgeFTP 2.3a2

Luigi Auriemma Application: SurgeFTP http://www.netwinsite.com/surgeftp/ Versions: = 2.3a2 Platforms: Windows, Linux and Solaris Bug: NULL pointer access Exploitation: remote Date: 25 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fi...

Titan FTP Server USER/PASS命令远程堆溢出漏洞

BUGTRAQ ID: 27568 CVECAN ID: CVE-2008-0702,CVE-2008-0725 Titan FTP Server是一款FTP服务程序。 Titan FTP Server处理超长命令请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向Titan FTP Server的FTP服务和管理服务提交了超长的USER或PASS命令的话，就可能触发堆溢出，导致执行任意指令。 South River Technologies Titan FTP Server 3.21 临时解决方法：...