CVE-2002-2238

CVE-2002-2238 describes a directory traversal vulnerability in Kunani ODBC FTP Server 1.0.10 that allows remote attackers to read arbitrary files by supplying a ..\ in a GET request. The affected component is the server software; the underlying issue is improper path validation enabling access ou...

CVE-2002-2238

Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...

CVE-2003-1349

Directory traversal vulnerability in NITE ftp-server NiteServer 1.83 allows remote attackers to list arbitrary directories via a ".." backslash dot dot in the CD CWD command...

CVE-2003-1349

The CVE-2003-1349 entry describes a Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83. The issue occurs when a remote attacker uses a backslash-dot-dot sequence in the CWD command to traverse directories and list arbitrary paths. Documented impact includes partial confidentia...

CVE-2003-1349: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in NITE ftp-server NiteServer 1.83 allows remote attackers to list arbitrary directories via a ".." backslash dot dot in the CD CWD command...

CVE-2002-2238: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...

CVE-2007-5431

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

Code injection

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

CVE-2004-2728

CVE-2004-2728 describes a buffer overflow in the FTP server component of Hummingbird Connectivity 7.1 and 9.0 triggered by a long argument to the XCWD command. The vulnerability allows remote, authenticated users to cause an application crash and a denial of service. No specific remediation or pa...

CVE-2004-2728

Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service application crash via a long argument to the XCWD command...

CVE-2004-2728: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service application crash via a long argument to the XCWD command...

smbfptd FTP server format string vulnerability

Format string vulnerability on directory listing creation...

php security update

CentOS Errata and Security Advisory CESA-2007:0889 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting languag...

Command injection

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service infinite loop by 1 repeatedly sending a 550 error response, or 2 sending a 550 error response and then...

Directory traversal

Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder...

CVE-2007-4844

The CVE concerns X-Diesel Unreal Commander 0.92 (builds 565 and 573). The flaw is in how it handles an FTP server’s response to CWD /, leading to a denial of service (infinite loop) when the server repeatedly returns 550 errors or 550 followed by disconnect. Root cause: improper handling of FTP e...

CVE-2007-4844

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service infinite loop by 1 repeatedly sending a 550 error response, or 2 sending a 550 error response and then...

CVE-2007-4843: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder...

CVE-2007-4844: Improper Input Validation

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service infinite loop by 1 repeatedly sending a 550 error response, or 2 sending a 550 error response and then...

CVE-2007-4756

Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrary files via ".." dot dot backslash sequences in a filename. NOTE: the ".." are not displayed when the user lists files. NOTE: this can be leveraged for code...