UPlus-FTP-Server

UPlus FTP server 1.7 is prone to a buffer overflow that allows remote attackers to cause a DoS or execute arbitrary code via a long username or password in a read or write request. The vulnerability is caused due to a boundary error in the handling of filenames and can be exploited to cause a...

AIX5l FTP Server Remote Root Hash Disclosure

AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1 DISCOVERED & EXPLOITED BY KINGCOPE JULY 20...

Directory Traversal Vulnerability in TurboFTP Server

High-Tech Bridge SA Security Research Lab has discovered vulnerability in TurboFTP Server which could be exploited to delete or execute arbitrary files on vulnerable system. 1 Directory Traversal Vulnerability in TurboFTP Server The vulnerability exists due to insufficient sanitation of the...

Easy FTP Server 1.7.0.11 LIST Buffer Overflow

!/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print """ Easy FTP Server v1.7.0.11 LIST Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com http://ipositivesecurity.blogspot.com """ if...

AIX5l with FTP-Server - Hash Disclosure

AIX5l with FTP-Server - Hash Disclosure AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1...

Easy FTP Server 1.7.0.11 MKD Buffer Overflow

!/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print """ Easy FTP Server v1.7.0.11 MKD Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com http://ipositivesecurity.blogspot.com """ if...

Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================ Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit Post Auth ================================================================================...

AIX5l with FTP-Server Remote Root Hash Disclosure Exploit

Exploit for linux platform in category remote exploits ========================================================= AIX5l with FTP-Server Remote Root Hash Disclosure Exploit ========================================================= AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH...

Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================ Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit Post Auth ================================================================================...

Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================= Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit Post Auth...

Power/Personal FTP Server Denial Of Service

!/usr/bin/python -------------------------------------------- Power/Personal FTP Server RETR Command DoS -------------------------------------------- Title: Power/Personat FTP Server RETR Command DoS Author: antrhacks Software Link: http://www.cooolsoft.com/download/PowerFTP.EXE Version: 2.30...

Open-FTPD Authentication Bypass Vulnerability

Open&Compact FTP Server Open-FTPD is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Power/Personal FTP Server - RETR Denial of Service

!/usr/bin/python -------------------------------------------- Power/Personal FTP Server RETR Command DoS -------------------------------------------- Title: Power/Personat FTP Server RETR Command DoS Author: antrhacks Software Link: http://www.cooolsoft.com/download/PowerFTP.EXE Version: 2.30...

PowerPersonal FTP Server - RETR Denial of Service

PowerPersonal FTP Server - RETR Denial of Service !/usr/bin/python -------------------------------------------- Power/Personal FTP Server RETR Command DoS -------------------------------------------- Title: Power/Personat FTP Server RETR Command DoS Author: antrhacks Software Link:...

CVE-2010-2695

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...

Directory traversal

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...

CVE-2010-2695

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...

CVE-2010-2695

Xlight FTP Server 3.x is affected by a directory traversal vulnerability in the SFTP/SSH2 virtual server. Versions 3.5.0 and 3.5.5 (and possibly others) before 3.6 allow remote authenticated users to read, overwrite, or delete arbitrary files by crafting .. sequences in commands such as ls, rm, r...

Wing FTP Server < 3.5.1 XSS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.5.1. The web server included with such versions is affected by a cross-site scripting vulnerability. By sending a specially crafted 'POST' request to the admin web interface, an authenticated, remote...

Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...