CVE-2003-1476

CVE-2003-1476 affects Cerberus FTP Server 2.1. The provided documents describe a plaintext storage of usernames and passwords, which could allow local users to gain access. This disclosure aligns with a local-privilege concern but the connected sources do not provide explicit exploit vectors, imp...

ProFTPD < 1.3.0a Multiple Vulnerabilities

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host is earlier than 1.3.0a. As such, it may be affected by one or more of the following vulnerabilities : - An off-by-one string manipulation flaw exist...

CVE-2002-2238

CVE-2002-2238 describes a directory traversal vulnerability in Kunani ODBC FTP Server 1.0.10 that allows remote attackers to read arbitrary files by supplying a ..\ in a GET request. The affected component is the server software; the underlying issue is improper path validation enabling access ou...

CVE-2002-2238

Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...

CVE-2003-1349

Directory traversal vulnerability in NITE ftp-server NiteServer 1.83 allows remote attackers to list arbitrary directories via a ".." backslash dot dot in the CD CWD command...

CVE-2003-1349

The CVE-2003-1349 entry describes a Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83. The issue occurs when a remote attacker uses a backslash-dot-dot sequence in the CWD command to traverse directories and list arbitrary paths. Documented impact includes partial confidentia...

Code injection

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

CVE-2007-5431

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

CVE-2004-2728

CVE-2004-2728 describes a buffer overflow in the FTP server component of Hummingbird Connectivity 7.1 and 9.0 triggered by a long argument to the XCWD command. The vulnerability allows remote, authenticated users to cause an application crash and a denial of service. No specific remediation or pa...

CVE-2004-2728

Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service application crash via a long argument to the XCWD command...

smbfptd FTP server format string vulnerability

Format string vulnerability on directory listing creation...

php security update

CentOS Errata and Security Advisory CESA-2007:0889 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting languag...

Command injection

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service infinite loop by 1 repeatedly sending a 550 error response, or 2 sending a 550 error response and then...

Directory traversal

Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder...

CVE-2007-4844

The CVE concerns X-Diesel Unreal Commander 0.92 (builds 565 and 573). The flaw is in how it handles an FTP server’s response to CWD /, leading to a denial of service (infinite loop) when the server repeatedly returns 550 errors or 550 followed by disconnect. Root cause: improper handling of FTP e...

CVE-2007-4844

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service infinite loop by 1 repeatedly sending a 550 error response, or 2 sending a 550 error response and then...

FileCopa FTP Server Pre 18 Jul Version

This module exploits the buffer overflow found in the LIST command in fileCOPA FTP server pre 18 Jul 2006 version discovered by www.appsec.ch This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

BolinTech Dream FTP Server 1.02 Format String

This module exploits a format string overflow in the BolinTech Dream FTP Server version 1.02. Based on the exploit by SkyLined. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BolinTech Dream F...

LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

This module exploits a buffer overflow in the LeapWare LeapFTP v2.7.3.600 client that is triggered through an excessively long PASV reply command. This module was ported from the original exploit by drG4njubas with minor improvements. This module requires Metasploit: https://metasploit.com/downlo...

CVE-2007-4756

Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrary files via ".." dot dot backslash sequences in a filename. NOTE: the ".." are not displayed when the user lists files. NOTE: this can be leveraged for code...