6454 matches found
CVE-2002-0930
The CVE-2002-0930 entry describes a format-string vulnerability in the NWFTPD FTP server of Novell NetWare 6.0 SP1. The issue allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command. Affected software explicitly named is the NWFTPD component of NetWare ...
CVE-2002-0877
CVE-2002-0877 describes a directory traversal vulnerability in the FTP server for Shambala 4.5. The flaw allows remote attackers to read arbitrary files by injecting .. (dot dot) into the LIST (ls) or GET commands. Public details in the provided sources confirm the vulnerability class (directory ...
FTP Server Traversal Arbitrary File Access
The remote FTP server allows users to browse the entire remote disk by issuing commands with traversal style characters. An attacker could exploit this flaw to gain access to arbitrary files. TRUSTED...
WS_FTP Multiple Command Long Argument Overflow
It is possible to shut down the remote FTP server by issuing a command followed by a too long argument. An attacker may use this flow to prevent your site from sharing some resources with the rest of the world, or even execute arbitrary code on your system. C Tenable Network Security, Inc...
TYPSoft FTP Server Malformed STOR / RETR Command DoS
The remote FTP server crashes when it is sent the command RETR ../../ or STOR ../../ An attacker may use this flaw to cause the server to crash. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and C...
CVE-2002-0791
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service CPU consumption via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length...
CVE-2002-0826
Buffer overflow in WSFTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command...
PT-2002-1846 · Ipswitch · Ws Ftp Ftp Server
Name of the Vulnerable Software and Affected Versions: WS FTP FTP Server version 3.1.1 Description: The issue allows remote authenticated users to execute arbitrary code via a long SITE CPWD command, which is a buffer overflow. This can be exploited by sending a long command to the server,...
CVE-2002-0405
Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . dot characters...
CVE-2002-0791
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service CPU consumption via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length...
CVE-2002-0713
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code 1 via the MSNT auth helper msntauth when using denyusers or allowusers files, 2 via the gopher client, or 3 via the FTP server directory listing parser when...
Directory traversal in Pablo's FTP server
No description provided...
Pablo Sofware Solutions FTP server Directory Traversal Vulnerability
Pablo Sofware Solutions FTP server Directory Traversal Vulnerability .oO Overview Oo. Pablo Software Solutions FTP server version 1.0 build 9 shows files and directories that reside outside the normal FTP root directory. Discovered on 2002, July, 20th Vendor: Pablo Software Solutions Pablo's FTP...
JanaServer multiple vulnerabilities
Title: Multiple vulnerabilities in JanaServer Author: ZARAZA Date: July, 22 2002 Affected: JanaServer 2.2.1 and prior JanaServer 1.46 and prior Vendor: Thomas Hauck Risk: High critical if some services, for example HTTP, are available from public interface Remote: yes Exploitable: yes Vendor...
Zaurus PDA FTP Server Unpassworded root Account
The remote Zaurus FTP server can be accessed as the user 'root' with no password. An attacker may use this flaw to steal or modify the content of your PDA, including but not limited to your address book, personal files, and list of appointments. C Tenable Network Security, Inc. Script audit and...
CVE-2002-0558
Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...
cqure.net.20020521.netware_nwftpd_fmtstr
cqure.net Security Vulnerability Report No: cqure.net.20020521.netwarenwftpdfmtstr ============================================ Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the FTP server to ABEND resulting in...
CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2001-1295
CVE-2001-1295 is a directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the CD command. The available sources confirm the affected software and the traversal nature but do not provide exploit...
CVE-2001-1043
The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...