CVE-2001-0254

FaSTream FTP++ Server 2.0 is affected. The vulnerability allows remote attackers to reveal the server’s real pathname by issuing the pwd command, constituting an information-disclosure issue. The provided documents confirm the affected product and the nature of the data exposed (real pathname), b...

CVE-2001-0255

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name e.g. C: in the requested pathname...

CVE-2001-0255

FaSTream FTP++ Server 2.0 is affected by a vulnerability where remote attackers can list arbitrary directories by issuing the ls command with a path containing a drive letter (e.g., C:). The entry indicates a remote access vector with low complexity and partial confidentiality impact (CVSS 2.0 ba...

CVE-2001-0293

Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. dot dot in the GET command...

CVE-2001-0256

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...

CVE-2001-0294

Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via 1 a .. dot dot in a GET command, or 2 a ... in a CWD command...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...

CVE-2001-0188

GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...

WU-FTPD 2.4/2.5/2.6 / Trolltech ftpd 1.2 / ProFTPd 1.2 / BeroFTPD 1.3.4 FTP - glob Expansion

source: https://www.securityfocus.com/bid/2496/info Many FTP servers are vulnerable to a denial of service condition resulting from poor globbing algorithms and user resource usage limits. Globbing generates pathnames from file name patterns used by the shell, eg. wildcards denoted by and ?,...

CVE-2001-0188

GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...

CVE-2001-0188

Affected software: GoodTech FTP Server for Windows. Vulnerability: denial-of-service via a flood of connections that causes the server to crash (CVE-2001-0188, affected versions 3.0.1.2.1.0 and earlier). Evidence: multiple sources describe an DoS condition from rapid/abusive connection attempts; ...

Broker Ftp Server 5.0 Vulnerability

Vulnerability: users can break out of their root directory and list directories. Depending on the priv. you have other commands like delete maybe executed outside of the home. directory. e:crap was used as homedir. deleting files in e:crap is enabled Detail: Problem: Again relative paths. dir:...

Sunftp build9(1) - ftp server Vulnerability

It is possible to break out of the root directory by using relative paths e:crap was used as homedir. of user test. the get command getting files from outside of the root dir. 220 chris FTP Server SunFTP b9 ready on port 21... Benutzer 10.17.3.44:none: test 331 Password required for test. Kennwor...

Netwin SurgeFTP 1.0b - Denial of Service

source: https://www.securityfocus.com/bid/2442/info SurgeFTP is a FTP Server distributed and maintained by Netwin. SurgeFTP is a configurable, easily maintained ftp server, functional on both the UNIX and Windows platforms. A problem with the SurgeFTP program could allow a denial of service to...

Vulnerability in TYPSoft FTP Server

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in TYPSoft FTP Server Overview TYPSoft FTP Server v0.85 is an ftp server available from http://www.webmasterfree.com and http://typsoft.n3.net. A vulnerability exists which allows a remote attacker to break out of the...

defcom.goodtech.ftp.txt

====================================================================== Defcom Labs Advisory def-2001-03 GoodTech Systems FTP Connection DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...

def-2001-03: GoodTech Systems FTP Connection DoS

====================================================================== Defcom Labs Advisory def-2001-03 GoodTech Systems FTP Connection DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...

WU-FTPD 2.4.2/2.5/2.6 - Debug Mode Client Hostname Format String

source: https://www.securityfocus.com/bid/2296/info Wu-ftpd is a widely used unix ftp server. It contains a format string vulnerability that may be exploitable under certain perhaps 'extreme' circumstances. When running in debug mode, Wu-ftpd logs user activity to syslog in an insecure manner. An...

CVE-2000-1027

Cisco Secure PIX Firewall 5.22 allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established...