6457 matches found
Debian DSA-1452-1 : wzdftpd - denial of service
'k1tk4t' discovered that wzdftpd, a portable, modular, small and efficient ftp server, did not correctly handle the receipt of long usernames. This could allow remote users to cause the daemon to exit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1452-1 [email protected] http://www.debian.org/security/ Steve Kemp January 06, 2008 http://www.debian.org/security/faq -...
DSA-1452-1 wzdftpd denial of service
Bulletin has no description...
CVE-2007-6473
Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command...
CVE-2007-6473
Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command...
Design/Logic Flaw
The gssuserok function in appl/ftp/ftpd/gssuserok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is...
CVE-2007-6146
Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service service stop via a "specific file" argument to an FTP command...
CVE-2007-6146
Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service service stop via a "specific file" argument to an FTP command...
CVE-2007-4679
CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands...
CVE-2007-5930
Cross-site scripting XSS vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-5930
CVE-2007-5930 is a Cross-site scripting (XSS) vulnerability in the Cerberus FTP Server web interface before version 2.46. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, impact is partial integrity with no confidentiality or avai...
CVE-2007-5930
Cross-site scripting XSS vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2004-2747
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...
CVE-2004-2747
Technical details about CVE-2004-2747 are not publicly provided in the supplied documents. Monitor for updates for new information about affected products, remediation, or exploit activity.
[SECURITY] Fedora 7 Update: proftpd-1.3.1-2.fc7
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
CVE-2002-2393
Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service no new connections via a series of MKD commands...
CVE-2002-2387
Hyperion FTP server 2.8.1 is affected by a directory traversal vulnerability that allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command. The issue is documented across multiple sources (NVD entry, Red Hat CVE page, CVE listing). The connected documents do not provid...
CVE-2002-2393
The CVE-2002-2393 entry affects Serv-U FTP server versions 3.0, 3.1, and 4.0.0.4. The issue causes denial of service by preventing new connections while validating user folder access rights, triggered by a series of MKD commands. No exploitation details are provided in the connected documents. No...