CVE-1999-1156

CVE-1999-1156 affects BisonWare FTP Server 4.1 and earlier. The issue is a remote denial-of-service triggered by a malformed PORT command containing a non-numeric character and a large number of carriage returns. The available sources describe an impact of availability loss (partial) with no conf...

CVE-1999-1326

Wu-FTPD ABOR privilege escalation (CVE-1999-1326) affects the wu-ftpd server. The vulnerability arises when handling an ABOR after a data connection has closed, due to a flaw in the dologout() path that can allow a remote attacker to gain elevated privileges (potentially root). Exploitation could...

CVE-2001-0706

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

CVE-2001-0646

The CVE concerns Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3. A remote attacker can cause a denial-of-service (hang) by supplying a directory name of a specific length. The available documents do not specify the underlying root cause, affected components beyond the FTP server, or concr...

SECURITY.NNOV: Buffer overflows in Worldgroup

Dear bugtraq, Topic: buffer overflows in WorldGroup 3.0 ftp and web servers Authors: Limpid Byte team http://lbyte.void.ru, [email protected] Date: February, 25 2002 Software: WorldGroup 3.x Vendor: Galacticomm http://www.gcomm.com/ Risk: High Remote: Yes Exploitable: Yes Vendor Status: Not contacted...

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service // source: https://www.securityfocus.com/bid/4185/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers....

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service

// source: https://www.securityfocus.com/bid/4185/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been reported in the FTP server includ...

InstantServers MiniPortal Multiple Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= InstantServers MiniPortal Multiple Vulnerabilities =- Release date: Saturday, February 9, 2002 Introduction: InstantServers' MiniPortal provides a complete solution for fast and easy web site hosting on a Windows PC. It features a Apache-...

Многочисленные ошибки в InstantServers MiniPortal (multiple bugs)

Переполнения буфера, обратный путь в директориях и прочее в FTP-сервере...

Vulnerabilities in EServ 2.97

There are a couple of vulnerabilities in EServ 2.97. Vulnerability 1 The FTP server doesn't close the sockets that are allocated from using the PASV command. After all ports from 1024 to 5000 are listening after running a lot of PASV commands in a row no users can use passive mode anymore until t...

BlackMoon FTPd Buffer Overflow Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= BlackMoon FTPd Buffer Overflow Vulnerability =- Release date: Tuesday, January 15, 2002 Introduction: BlackMoon is a native windows2000 and XP FTP server application with features such as virtual directories, user accounts, file resuming an...

BrowseFTP Client 1.62 - Remote Buffer Overflow

BrowseFTP Client 1.62 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3781/info BrowseFTP is an ftp client that runs on various Microsoft Windows operating systems. An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a BrowseFTP...

BrowseFTP Client 1.62 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3781/info BrowseFTP is an ftp client that runs on various Microsoft Windows operating systems. An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a BrowseFTP client user. This is acheivable when a BrowseFT...

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

Multiple Vendor FTPD on Windows Floppy Request CPU Consumption DoS

It is possible for a remote user to cause a denial of service on a host running Serv-U FTP Server, G6 FTP Server or WarFTPd Server. Repeatedly submitting an 'a:/' GET or RETR request, appended with arbitrary data, will cause the CPU usage to spike to 100%. Nessus identified the remote server as...

Переполнение буфера в frox (buffer overflow)

Переполнение буфера при длинном ответе FTP-сервера...

Alert: Vulnerability in frox transparent ftp proxy.

There is a security hole in all the 0.6.x versions of the frox transparent ftp proxy up to and including version 0.6.6. Version 0.6.7 fixes this vulnerability, and upgrading to this is advised. Development snapshots are also affected up to and including frox-20011031.tar.gz. The vulnerability is...

Cooolsoft PowerFTP Server 2.0 3/2.10 - Multiple Denial of Service Vulnerabilities (1)

source: https://www.securityfocus.com/bid/3595/info PowerFTP is a commercial FTP server for Microsoft Windows 9x/ME/NT/2000/XP operating systems. It is maintained by Cooolsoft. Multiple instances of denial of service vulnerabilities exist in PowerFTP's FTP daemon. This is achieved by connecting t...

CVE-1999-1514

Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command...

WU-FTPD 2.6 - File Globbing Heap Corruption

source: https://www.securityfocus.com/bid/3581/info Wu-Ftpd is an FTP server based on the BSD 'ftpd' that is maintained by Washington University. Wu-Ftpd allows clients to organize files for FTP actions based on "file globbing" patterns. File globbing is also used by various shells. The...