XM Easy Personal FTP Server 5.8.0 - Remote Denial of Service

Date of Discovery: 24-Nov-2009 Credits:leinakesiatgmail.com Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server failed to handle more than 2000 files or folders in the root directory. Details: if you could log on...

Directory traversal

Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to 1 create arbitrary directories via directory traversal sequences in an MKD command or 2 create files with any contents in arbitrary directories via directory traversal sequences in a fil...

CVE-2009-4051

Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service daemon outage via multiple invalid SITE INDEX commands...

CVE-2009-4053

Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to 1 create arbitrary directories via directory traversal sequences in an MKD command or 2 create files with any contents in arbitrary directories via directory traversal sequences in a fil...

CVE-2009-4048

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service daemon outage via an APPE command to one socket in conjunction with a DELE command to a second socket...

Command injection

Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service daemon outage via multiple invalid SITE INDEX commands...

Design/Logic Flaw

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service daemon outage via an APPE command to one socket in conjunction with a DELE command to a second socket...

CVE-2009-4053

CVE-2009-4053 describes multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139. The issue allows remote authenticated users to (1) create arbitrary directories via directory traversal in MKD commands and (2) create files with arbitrary contents in arbitrary directories via dir...

CVE-2009-4051

Summary: CVE-2009-4051 affects Home FTP Server, specifically versions earlier than 1.10.3.144. The issue allows remote attackers to cause a denial of service (daemon outage) by sending multiple invalid SITE INDEX commands. The public metrics indicate a CVSS v2 base score of 5.0 (AV:N/AC:L/Au:N/C:...

CVE-2009-4051

Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service daemon outage via multiple invalid SITE INDEX commands...

CVE-2009-4048

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service daemon outage via an APPE command to one socket in conjunction with a DELE command to a second socket...

CVE-2009-4048

CVE-2009-4048 affects XM Easy Personal FTP Server 5.8.0. The vulnerability allows remote authenticated users to cause a denial of service (daemon outage) by issuing an APPE command to one socket in conjunction with a DELE command to a second socket. Public documentation in the provided sources co...

Labtam ProFTP Welcome Message Buffer Overflow Vulnerability

Labtam ProFTP is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4048: Undefined Security Weakness

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service daemon outage via an APPE command to one socket in conjunction with a DELE command to a second socket...

CVE-2009-4053: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to 1 create arbitrary directories via directory traversal sequences in an MKD command or 2 create files with any contents in arbitrary directories via directory traversal sequences in a fil...

CVE-2009-4051: Improper Input Validation

Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service daemon outage via multiple invalid SITE INDEX commands...

CVE-2009-4006

CVE-2009-4006 documents a remote stack-based buffer overflow in the RhinoSoft Serv-U FTP server’s TEA decoding algorithm. Affected versions include 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0. The vulnerability allows an attacker to execute arbitrary code by sending a long hexadecimal str...

CVE-2009-4006: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string...

RhinoSoft Serv-U FTP Server TEA Decoder Remote Stack Buffer Overflow Vulnerability

RhinoSoft Serv-U FTP Server is prone to a remote stack-based buffer- overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed...

RhinoSoft Serv-U FTP Server TEA Decoder Remote Stack Buffer Overflow Vulnerability

RhinoSoft Serv-U FTP Server is prone to a remote stack-based buffer- overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...