CVE-2012-5329

CVE-2012-5329 affects TYPSoft FTP Server 1.1. A buffer overflow in handling a long APPE command string can crash the server, causing a denial of service for remote authenticated users. The vulnerability’s root cause is the overflow in the APPE path; impact is an application crash/DoS with partial...

CVE-2012-5329

Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service application crash via a long string in an APPE command...

CVE-2012-5301

The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data...

Default configuration

The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data...

CVE-2012-2999

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

CVE-2012-5301

Cerberus FTP Server prior to version 5.0.4.0 is affected by a DES cipher weakness in SSH sessions, allowing potential eavesdropping and easier brute-force attacks on encrypted traffic. The vulnerability stems from default configurations that enable DES, increasing the risk of sensitive data discl...

CVE-2012-2999

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

CVE-2012-5301

The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data...

CVE-2012-2999

Cerberus FTP Server is vulnerable to cross-site request forgery (CSRF) in the web interface on versions prior to 5.0.5.0. The flaw allows an authenticated administrator’s session to be hijacked to perform actions such as adding a user or changing FTP service state via requests like /usermanager/u...

Cerberus FTP Server web interface cross-site request forgery vulnerability

Overview The Cerberus FTP Server web interface contains a cross-site request forgery vulnerability Description CWE-352: Cross-Site Request Forgery CSRF: The Cerberus FTP Server web interface is vulnerable to CSRF using the HTTP POST method in the :10000/usermanager/users/modify. The application h...

Microsoft IIS 5.0/6.0 FTP Server (Stack Exhaustion) Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Microsoft IIS 5.0/6.0 FTP Server Stack Exhaustion Denial of Service GUI VERSION Exploit Author: D35m0nd142 Date: 03/10/2012 Vendor Homepage: http://www.iis.net/ Tested on Ubuntu 12.04 CVE: 2009-2521 Special thanks ...

Turbo FTP Server 1.30.823 PORT Overflow

This module exploits a buffer overflow vulnerability found in the PORT command in Turbo FTP Server 1.30.823 & 1.30.826, which results in remote code execution under the context of SYSTEM. Module Options msf use exploit/windows/ftp/turboftp/port msf undefinedport show actions ...actions... msf...

Cerberus-FTP-Server

Cerberus FTP Server 4.0.9.8 REST Remote Buffer Overflow Exploit Newer version's not tested, maybe vulnerable too ToDo: Add remote shell ToDo: Test vulnerable targets import errno from os import strerror from socket import import sys from time import sleep from struct import pack ip = sys.argv1 po...

CVE-2012-5002

Stack-based buffer overflow in SR10 FTP server SR10.exe 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command...

Stack overflow

Stack-based buffer overflow in SR10 FTP server SR10.exe 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command...

CVE-2012-5002

Vulnerability CVE-2012-5002 affects Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) version 1.1.0.6. The flaw is a stack-based buffer overflow triggered by a long USER command when the Log file name option is enabled, enabling remote code execution under the FTP user context. Multiple sources ...

CVE-2012-5002

Stack-based buffer overflow in SR10 FTP server SR10.exe 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command...

Mandrake Linux Security Advisory : wu-ftpd (MDKSA-2003:080)

A vulnerability was discovered by Janusz Niewiadomski and Wojciech Purczynski in the wu-ftpd FTP server package. They found an off-by- one bug in the fbrealpath function which could be used by a remote attacker to obtain root privileges on the server. This bug can only be successfully accomplishe...

Fedora Update for globus-gridftp-server-control FEDORA-2012-8445

Check for the Version of globus-gridftp-server-control OpenVAS Vulnerability Test Fedora Update for globus-gridftp-server-control FEDORA-2012-8445 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...