240 matches found
CVE-2007-3769
Cross-site scripting XSS vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE:...
CVE-2007-3548
Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service application hang or crash and possibly execute arbitrary code by sending a large banner to a client that is sending a file...
Stack overflow
Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service application hang or crash and possibly execute arbitrary code by sending a large banner to a client that is sending a file...
CVE-2007-3548
Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service application hang or crash and possibly execute arbitrary code by sending a large banner to a client that is sending a file...
CVE-2007-3161
Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long response...
CVE-2007-3161
CVE-2007-3161 affects Ace-FTP Client 1.24a. The vulnerability is a buffer overflow in the client triggered by a long response from a remote FTP server, allowing user-assisted remote code execution. The available connected documents confirm the product/version and the underlying issue (buffer over...
CVE-2007-3161
Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long response...
findutils -- GNU locate heap buffer overrun
James Youngman reports: When GNU locate reads filenames from an old-format locate database, they are read into a fixed-length buffer allocated on the heap. Filenames longer than the 1026-byte buffer can cause a buffer overrun. The overrunning data can be chosen by any person able to control the...
Heap overflow
Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner...
CVE-2007-0790
Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner...
SACERDOTE
Some FTP data transfer protocol problems, common implementation errors and suggestions for fixing them David Sacerdote, [email protected] April, 1996, The icons .... show the translator's comments. The symbol ? shows places where the translator disagrees with the author. Original text of the...
CVE-2006-4974
Buffer overflow in Ipswitch WSFTP Limited Edition LE 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...
INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities
INFIGO IS Security Advisory ADV-2006-05-03 http://www.infigo.hr/ Title: Multiple FTP Servers vulnerabilities Advisory ID: INFIGO-2006-05-03 Date: 2006-05-05 Advisory URL: http://www.infigo.hr/hr/infocus/advisories/INFIGO-2006-05-03 Impact: Remote code execution and DoS Risk Level: High...
Different FTP servers multiple security vulnerabilities
Multiple vulnerabilities were uncovered with FTP Fuzzer stress test suite. - ArgoSoft FTP Server RNTO Unicode overflow - Golden FTP Server NLST overflow - FileZilla FTP Server MLSD - FileZilla remote server interface homemade protocol - WarFTPD various exceptions and WDM.exe overflow...
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...
CVE-2005-2126
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted...
CVE-2005-3258
The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...
CVE-2005-3258
The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...
