CVE-2006-5949

Directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote attackers to create arbitrary directories via directory traversal sequences in a MKD request. NOTE: the provenance of this information is unknown; details are obtained from third party...

CVE-2006-5949

CVE-2006-5949 describes a directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier) . The issue allows remote attackers to exploit MKD requests to create arbitrary directories via directory traversal sequences. The description notes the vulnerability details ...

CVE-2006-5947

Multiple directory traversal vulnerabilities in Conxint FTP Server 2.2.0603, and possibly earlier, allow remote attackers to read arbitrary files and list arbitrary directories via directory traversal sequences in 1 DIR LIST or NLST and 2 GET RETR commands. NOTE: the provenance of this informatio...

[OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory OpenPKG GmbH http://openpkg.org/security/ http://openpkg.com OpenPKG-SA-2006.035 2006-11-16 Package: proftpd Vulnerability: denial of service OpenPKG Specific: no Affected Series: Affected Packages: Corrected Packages:...

[NT] Selenium FTP Server Directory Traversal

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Teamtek Universal FTP Server - Multiple Commands Remote Denial of Service Vulnerabilities

Teamtek Universal FTP Server - Multiple Commands Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An...

Teamtek Universal FTP Server - Multiple Commands Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can exploit these issues to crash the affected application, denying service to...

NetKit FTP Server chdir错误设置用户UID/GID漏洞

NetKit是运行在Linux平台下的工具包。 Netkit FTP Server在处理用户的UID/GID时存在漏洞，导致在某些情况下用户无法访问目录。 Netkit FTP Server（ftpd）在为登录进服务器的用户设置UID/GID之前以root身份执行了chdir操作，这可能导致某些情况下，比如通过NFS输出HOME目录共享，导致目前设置错误的访问权限。 Netkit Linux Netkit 0.17 Gentoo已经为此发布了一个安全公告（GLSA-200611-05）以及相应补丁: GLSA-200611-05：Netkit FTP Server: Privilege...

HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation

source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits...

Gene6 FTP Server本地权限提升漏洞

Gene6 FTP Server是一款非常流行的Microsoft Windows平台的FTP Server。 默认安装后，本地的非特权用户可以修改Gene6 FTP Server的设置，例如添加新的SITE命令。由于Gene6 FTP Server是以SYSTEM权限运行的，因此攻击者可以轻易的提升权限。 Gene6 G6 FTP Server http://marc.theaimsgroup.com 1. 以非特权用户的身份登陆。 2. 打开Gene6 FTP Server控制台，添加FTP用户帐号，如“test” 3. 对FTP...

[Full-disclosure] [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation

Gentoo Linux Security Advisory GLSA 200611-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Netkit FTP Server protection bypass

Invalid chroot and seteuid usage under some circumstances allow FTP root directory bypass...

Netkit FTP Server: Privilege escalation

Background net-ftp/netkit-ftpd is the Linux Netkit FTP server with optional SSL support. Description Paul Szabo reported that an incorrect seteuid call after the chdir function can allow an attacker to access a normally forbidden directory, in some very particular circumstances, for example when...

WarFTPd FTP Server format string vulnerability

CWD command format string vulnerability...

WarFTPd 1.82.00-RC11 - Remote Denial of Service

!/usr/bin/env python import sys import ftplib print "WARFTPD Remote Denial Of Service DOS" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg = ftp.connecttarget, targetPort print "+ Ok. Target banner" print m...

WFTPD Pro FTP server buffer overflow

Buffer overflow in APPE command...

WarFTP Daemon < 1.82.00-RC13 Multiple Command Remote Format Strings

Binary data 3808.prm...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a long argument to the NLST command (potentially with -al flags). The issue requires an authenticated remote user to cause the DoS, and the description does not provide explicit exploit det...