HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation

source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits...

Gene6 FTP Server本地权限提升漏洞

Gene6 FTP Server是一款非常流行的Microsoft Windows平台的FTP Server。 默认安装后，本地的非特权用户可以修改Gene6 FTP Server的设置，例如添加新的SITE命令。由于Gene6 FTP Server是以SYSTEM权限运行的，因此攻击者可以轻易的提升权限。 Gene6 G6 FTP Server http://marc.theaimsgroup.com 1. 以非特权用户的身份登陆。 2. 打开Gene6 FTP Server控制台，添加FTP用户帐号，如“test” 3. 对FTP...

Netkit FTP Server protection bypass

Invalid chroot and seteuid usage under some circumstances allow FTP root directory bypass...

[Full-disclosure] [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation

Gentoo Linux Security Advisory GLSA 200611-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Netkit FTP Server: Privilege escalation

Background net-ftp/netkit-ftpd is the Linux Netkit FTP server with optional SSL support. Description Paul Szabo reported that an incorrect seteuid call after the chdir function can allow an attacker to access a normally forbidden directory, in some very particular circumstances, for example when...

WarFTPd FTP Server format string vulnerability

CWD command format string vulnerability...

WarFTPd 1.82.00-RC11 - Remote Denial of Service

!/usr/bin/env python import sys import ftplib print "WARFTPD Remote Denial Of Service DOS" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg = ftp.connecttarget, targetPort print "+ Ok. Target banner" print m...

WFTPD Pro FTP server buffer overflow

Buffer overflow in APPE command...

WarFTP Daemon < 1.82.00-RC13 Multiple Command Remote Format Strings

Binary data 3808.prm...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a long argument to the NLST command (potentially with -al flags). The issue requires an authenticated remote user to cause the DoS, and the description does not provide explicit exploit det...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

XM Easy Personal FTP Server &lt;= 5.2.1 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Title: XM Easy Personal FTP Server = 5.2.1 'NLST -al' Remote Denial of Service Author: boecke Discovery: boecke Vulnerability Type: Remote Denial of Service Risk: Low Risk Requires valid Software Affected: XM Easy Personal FTP Server = 5.2.1...

XM Easy Personal FTP Server <= 5.2.1 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service !/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER "...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

!/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER " . $remoteUsername . "\r\n"; print " FTP Username: '" . $remoteUsername...

Easy File Sharing FTP Server PASS命令远程缓冲区溢出漏洞

Easy File Sharing FTP Server是一个简单易用功能强大的FTP Server软件。 Easy File Sharing FTP Server在处理带有超长参数的PASS命令时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果远程攻击者提供了超过2571个字节的超长参数的话就会触发这个漏洞，导致执行任意指令。 EFS Software Easy File Sharing FTP Server 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Serv-U FTP Server MDTM timezone buffer overflow

Added: 10/27/2006 CVE: CVE-2004-0330 BID: 9751 OSVDB: 4073 Background Serv-U FTP Server supports the MDTM command which allows users to modify the time stamp on files. Problem A buffer overflow in Serv-U FTP Server allows remote authenticated attackers to execute arbitrary commands by sending the...

Serv-U FTP Server MDTM timezone buffer overflow

Added: 10/27/2006 CVE: CVE-2004-0330 BID: 9751 OSVDB: 4073 Background Serv-U FTP Server supports the MDTM command which allows users to modify the time stamp on files. Problem A buffer overflow in Serv-U FTP Server allows remote authenticated attackers to execute arbitrary commands by sending the...