ruby: Command injection vulnerability in Net::FTP

It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into downloading files with...

CVE-2014-1215

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...

Buffer overflow

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...

CVE-2014-1215

Core FTP Server is affected (versions prior to 1.2 build 508). The vulnerability consists of multiple buffer overflows that occur when reading data from config.dat and the Windows Registry, caused by insufficient boundary checks. A local attacker can exploit these overflows to gain privileges on ...

CVE-2014-1215

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...

CVE-2014-1215: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...

PT-2018-4166

Name of the Vulnerable Software and Affected Versions Core FTP Server versions prior to 1.2 build 508 Description The issue is related to multiple buffer overflows that can be exploited by local users to gain privileges. This is achieved through vectors related to reading data from config.dat and...

JVN#92259864: TinyFTP Daemon vulnerable to buffer overflow

TinyFTP Daemon provided by Hisayuki Nomura is a FTP File Transfer Protocol server. TinyFTP Daemon contains a buffer overflow vulnerability CWE-121. Impact An attacker may be able to cause a denial-of-service DoS condition or execute arbitrary code. Solution Consider stop using Tiny FTP Daemon...

ftp.us2.freshrpms.net XSS vulnerability

Open Bug Bounty ID: OBB-578465 Description| Value ---|--- Affected Website:| ftp.us2.freshrpms.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

CVE-2018-0087

CVE-2018-0087 affects Cisco Web Security Appliance (WSA) via an FTP authentication bypass. Affects AsyncOS for WSA on virtual/hardware appliances running AsyncOS 10.5.1; vulnerability arises from incorrect FTP credential validation. If FTP is enabled on the management interface, an unauthenticate...

CVE-2018-0087: Improper Authentication

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

PT-2018-8597

Name of the Vulnerable Software and Affected Versions: Cisco Web Security Appliance WSA versions 10.5.1 Description: A vulnerability in the FTP server could allow an unauthenticated, remote attacker to log in without a valid password, provided they have a valid username. This is due to incorrect...

SEGGER embOS/IP FTP Server Denial of Service Vulnerability

SEGGER embOS/IP FTP Server is an FTP server from SEGGER Microcontroller, Germany. A security vulnerability exists in SEGGER embOS/IP FTP Server version 3.22. A remote attacker can cause a denial of service daemon crash by sending an invalid LIST, STOR, or RETR command to exploit the vulnerability...

CVE-2018-7449

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

Command injection

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

CVE-2018-7449

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

CVE-2018-7449

CVE-2018-7449 summary : SEGGER embOS/IP FTP Server for Windows is affected up to version 3.22a. The vulnerability allows remote attackers to trigger a denial of service (daemon crash) by sending invalid FTP commands LIST, STOR, or RETR. Affected product: embOS/IP FTP Server v3.22 (pre-3.22a). The...

CVE-2018-7449

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

PT-2018-18078

Name of the Vulnerable Software and Affected Versions SEGGER FTP Server for Windows versions prior to 3.22a Description The issue allows remote attackers to cause a denial of service, resulting in the daemon crashing. This can be achieved by sending an invalid LIST, STOR, or RETR command...