Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

Platinum FTP Server

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server: The 'dir' command can be used to examine the filesystem of the machine and gather further information about the hos...

TYPSoft empty username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Kibuv worm detection

A fake FTP server was installed by the KIBUV.B worm on this port. This worm uses known security flaws to infect the system. This machine may already be a SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Serv-U FTP Server SITE CHMOD Command Stack Overflow Vulnerability

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the SITE CHMOD requests. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Flash FTP Server Directory Traversal Vulnerability

Flash FTP Server easy-to-set-up FTP server for all Windows platforms. Some bugs were found that will allow a malicious user to write and read anywhere on the disk. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

BlackJumboDog FTP server multiple command overflow

The remote host is running BlackJumboDog FTP server. This FTP server fails to properly check the length of parameters in multiple FTP commands, most significant of which is USER, resulting in a stack overflow. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted...

ArGoSoft FTP Server XCWD Overflow

The remote host is running the ArGoSoft FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

WS FTP Server DoS Vulnerability (Nov 2005)

WSFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WS FTP Server Session Hijacking Vulnerability (Nov 2005)

WSFTP server is prone to session hijacking during passive connections and to a FTP bounce attack when a user submits a specially crafted FTP command. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Hummingbird Connectivity FTP service XCWD Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and ar...

RobotFTP DoS

The remote host seems to be running RobotFTP. RobotFTP server has been reported prone to a denial of service vulnerability. The issue presents itself when certain commands are sent to the service, before authentication is negotiated. The following versions of RobotFTP are vulnerable: RobotFTP...

SunFTP Buffer Overflow

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands by sending more than 2100 characters to the server. OpenVAS Vulnerability Test $Id: sunftpdoverflow.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SunFTP Buffer...

TYPSoft empty username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. By sending an empty login username, an attacker can cause the ftp server to crash, denying service to legitimate users. OpenVAS Vulnerability Test $Id:...

EFTP installation directory disclosure

The remote FTP server can be used to determine the installation directory by sending a request on an unexisting file. An attacker may use this flaw to gain more knowledge about this host, such as its filesystem layout. OpenVAS Vulnerability Test $Id: eftprootdisclosure.nasl 8023 2017-12-07...

GlobalSCAPE Secure FTP Server <= 3.0.2 User Input Overflow Vulnerability

GlobalSCAPE Secure FTP Server is prone to a buffer overflow vulnerability due to mishandling the user-supplied input. SPDX-FileCopyrightText: 2005 SensePost Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TypSoft FTP STOR/RETR DoS Vulnerability

The remote FTP server crashes when it is sent the command RETR ../../ or STOR ../../ SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GuildFTPd Long SITE Command Overflow Vulnerability (2001)

The remote FTP server seems to be vulnerable to denial service attack through the SITE command when handling specially long request. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TYPSoft directory traversal flaw

The remote host seems to be running TYPSoft FTP earlier than 0.97.5 This version is prone to directory traversal attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GuildFTPd Directory Traversal

Version 0.97 of GuildFTPd was detected. A security vulnerability in this product allows anyone with a valid FTP login to read arbitrary files on the system. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...