240 matches found
CVE-2005-3150
CVE-2005-3150 affects Weex, a non-interactive FTP client used for updating web pages. The vulnerability is a format string bug in Weex that could allow remote code execution when processing filenames, as described in multiple sources. Debian and Gentoo advisories cite fixes in older branches and ...
CVE-2002-2026
Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply...
Multiple FTP servers path globbing DoS
Command like ls /..//..//..//..//..//..//..//..//..//..//..//../ causes server to hang...
CVE-2005-0372
Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...
CVE-2004-1376
Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. dot dot sequences in filenames returned from a LIST command...
CVE-2004-1280
CVE-2004-1280 affects junkie 0.3.1. The vulnerable code is gui_popup_view_fly in gui_tview_popup.c, which allows remote FTP servers to execute arbitrary commands via shell metacharacters in a filename, enabling command execution on the host. The documents do not provide a remediation or patch det...
CVE-2004-1136
Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service application crash via large replies to FTP commands...
CVE-2004-1136
CVE-2004-1136 affects CuteFTP Professional 6.0 (and possibly other versions). The vulnerability is a buffer overflow in the FTP command/response handling that occurs when the client processes large replies from an FTP server, enabling a remote server to trigger a denial of service (application cr...
CVE-2004-0739
Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service client crash and possibly execute arbitrary code via a long filename...
FTP Desktop 3.5 - Banner Parsing Buffer Overflow
source: https://www.securityfocus.com/bid/8559/info A buffer overflow vulnerability has been reported in FTP Desktop. The vulnerability occurs when FTP Desktop is parsing 'Welcome' banner 220 messages from remote FTP servers. When FTP Desktop receives an FTP banner exceeding a certain length, it...
CVE-2003-0558
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request...
IglooFTP 0.6.1 - Banner Parsing Buffer Overflow
source: https://www.securityfocus.com/bid/8161/info A buffer overflow vulnerability has been reported in IglooFTP. The vulnerability occurs when IglooFTP is parsing 'Welcome' banner messages from remote FTP servers. When IglooFTP receives an FTP banner exceeding a certain length, it will trigger...
baby.txt
In this advisorie there are some vulnerabilities i found yesterday for BabyFtp server,Baby web server,Baby Pop3 server and Quick n' easy Ftp. I informed the Company about these vulnerabilities and here are the e-mails they sent me: -----------------------------------------------------------------...
CuteFTP: buffer overflow
Damage Hacking Group security advisory www.dhgroup.org Product: CuteFTP client Authors: GlobalSCAPE Inc. www.globalscape.com Vulnerable versions: v.4. Vulnerability: buffer overflow Overview-------------------------------------------------------------- "CuteFTP is a Windows based File Transfer...
[NEWS] Directory Traversal Vulnerabilities in FTP Clients
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security would like to welcome Tiscali World Online to our service provider team. For more info on their service offering IP-Secure,...
Multiple bugs in Windows FTP servers
Buffer overflows, directory traversal...
Доступ к специальным устройствам в некоторых Web/FTP-серверах (special devices)
Возможно чтение/запись специальных устройств...
CVE-1999-1235
CVE-1999-1235 affects Internet Explorer 5.0 and involves the browser recording FTP credentials in the URL history (index.dat) and exposing them via the status bar when hovering links. The underlying issue is that usernames/passwords are stored in client-side history data, enabling local users to ...
Выход за пределы корневой директории с помощью .lnk-Файлов в ftp-серверах (directory traversal)
Поместив на сервер ярлык .lnk можно получить доступ к файлу находящемуся за пределами корневой папки FTP...