6461 matches found
CVE-2013-5655
CVE-2013-5655 describes a directory traversal vulnerability in the FTP server component of the YingZhi Python Programming Language for iOS 1.9. The issue allows remote attackers to read—and possibly write—arbitrary files via a .. (dot dot) in the default URI. Connected documents corroborate the a...
CVE-2014-1441
Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...
CVE-2014-1442
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...
CVE-2014-1443
Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...
Directory traversal
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...
Design/Logic Flaw
Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...
CVE-2014-1443
CVE-2014-1443 affects Core FTP Server 1.2 before build 515. Remote authenticated users can disclose the password of the previously logged-on user by sending a specially crafted USER command (length-specifically crafted string), likely due to an out-of-bounds/read-path issue. The impact is informa...
CVE-2014-1441
Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...
CVE-2014-1442
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...
CVE-2014-1442
Core FTP Server 1.2 before build 515 is vulnerable to a Directory Traversal via the XCRC command. The flaw allows remote authenticated users to determine the existence of arbitrary files using a /../ sequence. Affected software: Core FTP Server (version 1.2 prior to build 515). Root cause: improp...
CVE-2014-1441
CVE-2014-1441 affects Core FTP Server 1.2 prior to build 515. A remote attacker can trigger a denial-of-service by sending a malformed AUTH SSL command, with the condition demonstrated by pressing Enter twice, causing a reachable assertion and server crash. Mitigation is to upgrade to Core FTP Se...
CVE-2014-1443
Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...
CVE-2014-1841
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...
CVE-2014-1843
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...
CVE-2014-1842
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. dot dot in the search-bar value...
Directory traversal
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...
Directory traversal
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. dot dot in the search-bar value...
Directory traversal
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...
CVE-2014-1843
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...