CVE-2009-4795

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

CVE-2009-4795

CVE-2009-4795 : In Xlight FTP Server prior to 3.2.1, when ODBC authentication is enabled, remote attackers can trigger SQL injection through the USER (username) or PASS (password) commands. The underlying issue is the server processing user-supplied credentials in SQL without proper validation, a...

CVE-2009-4769

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4770

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...

Format string

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

Default credentials

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-4769

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4769

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4770

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-4770

The CVE-2009-4770 entry affects httpdx FTP server component versions 1.4, 1.4.5, 1.4.6, 1.4.6b and 1.5, where a default moderator password (pass123) enables remote attackers to obtain privileged access. The accompanying sources in the connected set confirm the exact default credential outcome but...

XM Easy Personal FTP Server LIST Denial Of Service

Exploit Title: XM Easy Personal FTP Server LIST Date: 4/17/2010 Author: Jeremiah Talamantes Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP, SP2 CVE : N/A Code : http://www.redteamsecure.com/assets/company/exploits/xmftp/xmexploit.php...

Trellian FTP Client PASV Buffer Overflow

Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server that passes the vulnerable PASV...

Trellian FTP Client PASV BOF Exploit

Exploit for windows platform in category remote exploits ==================================== Trellian FTP Client PASV BOF Exploit ==================================== Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link:...

Microsoft Windows FTP Server 1.4 - Authentication Bypass

Microsoft Windows FTP Server 1.4 - Authentication Bypass Exploit Title: WINDOWS FTP SERVER by DWG Auth Bypass Date: April 09, 2010 Software Link: http://www.windowsftpserver.com/freedownload.html Version: v 1.4 Tested on: Windows XP SP3 Author: chap0 Email: chap0x90atgmaildotcom Site:...

WINDOWS FTP SERVER by DWG (Auth Bypass)

Exploit for windows platform in category remote exploits ======================================= WINDOWS FTP SERVER by DWG Auth Bypass ======================================= Exploit Title: WINDOWS FTP SERVER by DWG Auth Bypass Date: April 09, 2010 Software Link:...

Microsoft Windows FTP Server 1.4 - Authentication Bypass

Exploit Title: WINDOWS FTP SERVER by DWG Auth Bypass Date: April 09, 2010 Software Link: http://www.windowsftpserver.com/freedownload.html Version: v 1.4 Tested on: Windows XP SP3 Author: chap0 Email: chap0x90atgmaildotcom Site: www.setfreesecurity.com Windows FTP Server by DWG Software is...

Easy FTP Server MKD command buffer overflow

Added: 04/08/2010 BID: 38102 OSVDB: 62134 Background UplusFTP formerly Easy FTP Server is a free FTP server for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by sending a MKD command with a specially crafted argumen...

Easy FTP Server MKD command buffer overflow

Added: 04/08/2010 BID: 38102 OSVDB: 62134 Background UplusFTP formerly Easy FTP Server is a free FTP server for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by sending a MKD command with a specially crafted argumen...

Easy FTP Server MKD command buffer overflow

Added: 04/08/2010 BID: 38102 OSVDB: 62134 Background UplusFTP formerly Easy FTP Server is a free FTP server for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by sending a MKD command with a specially crafted argumen...

Easy Ftp Server v1.7.0.2 MKD Remote Post-Authentication BoF Exploit

No description provided by source. include stdio.h include stdlib.h include string.h include sys/socket.h include netinet/in.h // // EasyFtp Server v1.7.0.2 MKD Remote Post-Authentication BoF Exploit // 11470x90c.c // // Date: 24/03/2010 // Author: x90c x90c.org // // Discovered by: loneferret //...