CVE-2003-1205

CVE-2003-1205 affects Crob FTP Server 2.60.1. Affected component: the FTP server’s file-rename handling. Root cause: remote authenticated users can trigger a denial of service (crash) by renaming a file to the MS-DOS device name “con.” Impact: DoS via crash; no other impacts described in the prov...

CVE-2005-1666

Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the 1 ftpxlatepath, 2 ftpiscanonical, or 3...

CVE-2005-1646

The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of...

Fastream NETFile Web / FTP server ftp bounce attack

It's possible to use FTP to bounce data to third party...

CVE-2005-1485

Golden FTP Server Pro 2.52 is affected by an information-disclosure vulnerability: when a GET request targets a non-existent file, the FTP error response reveals the absolute path of the server. This is a server-side path disclosure issue that can aid an attacker in mapping the environment. The p...

CVE-2005-1484

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

CVE-2005-1484

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

CVE-2005-1485

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...

CVE-2005-1485

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...

CVE-2005-1484

Golden FTP Server Pro 2.52 is vulnerable to a directory traversal flaw where a GET request containing a "\.." sequence prefixed by a """ can read files outside the share. Root cause is improper handling of backslash-dot-dot traversal, enabling reading of arbitrary files with partial confidentiali...

RaidenFTPD urlget Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability that could allow an attacker to read arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18225; scriptversion"1.18"...

RaidenFTPD Multiple Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability. An authenticated attacker could exploit this to read and write arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2004-1783

Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. slash dot dot...

CVE-2004-1783

CVE-2004-1783 refers to a directory traversal vulnerability in Net2Soft Flash FTP Server 1.0. Multiple connected sources (OpenVAS and RH/Red Hat metadata) confirm that a remote attacker can abuse a /.. path to read and create arbitrary files on affected systems, indicating potential impact on con...

CVE-2004-2037

CVE-2004-2037 describes a buffer overflow in Mollensoft Lightweight FTP Server 3.6. The flaw allows remote authenticated users to crash the server and potentially execute arbitrary code by sending a long CWD command (e.g., via an interactive FTP client). Documents identify the affected product an...

CVE-2004-2037

Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client...

CVE-2004-1992

CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...

CVE-2004-1992

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...

Orenosv HTTPFTP Server 0.8.1 - CGISSI.exe Remote Buffer Overflow (PoC)

Orenosv HTTPFTP Server 0.8.1 - CGISSI.exe Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/13549/info Orenosv HTTP/FTP server is prone to a remote buffer overflow vulnerability that affects 'cgissi.exe'. This issue presents itself when the application handles excessive values...

Orenosv HTTP/FTP Server 0.8.1 - 'CGISSI.exe' Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/13549/info Orenosv HTTP/FTP server is prone to a remote buffer overflow vulnerability that affects 'cgissi.exe'. This issue presents itself when the application handles excessive values supplied through an SSI command name. A successful attack can result ...