6375 matches found
CVE-1999-0777
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions...
WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion
WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under...
WU-FTPD 2.4.2/2.5 .0/2.6.0/2.6.1/2.6.2 - FTP Conversion
source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under some configurations where this is enabled a remote us...
ftpd.dos.pl
Who has more free file descriptors & network ports, you or the ftp server ? ftpd's which limit connections to 1 per user@host or similar may have some defense against this, or if they don't support multiple data connections open at the same time. I suspect "many" is the number of ftpd's which are...
serv-u.2.5.txt
Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability PROBLEM: UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a, The buffer overflow is caused by a bad Formed SITE command For the source / binary of this remote / local D.O.S Go to: http://www.ussrback.com/servu/ Vendor...
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user...
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service
source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user, including an 'anonymous' user...
bisonware.ftp.3.5.txt
Remote DoS Attack in BisonWare FTP Server V3.5 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in BisonWare FTP Server V3.5, the buffer overflow is caused by a long user name, 2000 characters, There is not much to expand on.... just a simple hole Example: Go to:...
CVE-1999-1519
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service resource exhaustion via a long 1 user name or 2 password...
g6ftp.dos.txt
Remote D.o.S Attack in G6 FTP Server v2.0 beta 4/5 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in G6 FTP Server v2.0 beta 4/5, the buffer overflow is caused by a long user name, 2000 characters. the G6FTP start to do infinites loops in the main program,and start eating all memo...
Gene6 G6 FTP Server 2.0 - Buffer Overflow (Denial of Service) (PoC)
Gene6 G6 FTP Server 2.0 - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU...
Gene6 G6 FTP Server 2.0 - Buffer Overflow (Denial of Service) (PoC)
source: https://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a halt. Source - 19624-1.zip Binary ...
FTPd CWD Command Account Enumeration
It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...
CVE-1999-1539
Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long 1 user name or 2 password...
QPC Software QVT Term 4.3QVTNet 4.3 Suite FTP Server - Denial of Service
QPC Software QVT Term 4.3QVTNet 4.3 Suite FTP Server - Denial of Service source: https://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a...
qvt-term.4.2.dos.txt
Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server, the buffer overflow is caused by a long user name / password, 2000 characters, and the re-connection to the Ftp Server. There is not much to expa...
QPC Software QVT Term 4.3/QVT/Net 4.3 Suite FTP Server - Denial of Service
source: https://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that is longer than 2000 characters...
brokerftp.txt
Remote DoS Attack in TransSoft's Broker Ftp Server v3.5 Vulnerability PROBLEM UssrLabs found a Remote DoS Attack in TransSoft's Broker Ftp Server v3.5, the buffer overflow is caused by a long user name 2730 characters. If TransSoft's Broker Server is running as a service the service will start...
TransSoft Broker FTP Server 3.0 x/4.0 - User Name Buffer Overflow
source: https://www.securityfocus.com/bid/783/info If an unusually long user name is passed to the Broker FTP server software, the program will crash. If the program is running as a service, the service will consume all available memory and crash the entire system...