Critical Security Advisory #005: ioFTPd User account enumeration vulnerability

Inicom networks ioFTPd 0.5.84u User account enumeration vulnerability Critical Security research: http://www.critical.lt Original Advisory may be found: http://www.critical.lt/?vulnerabilities/119 Vulnerable product: ioFTPd 0.5.84u maybe prior versions affected too Vulnerability type: User accoun...

CVE-2004-2532

CVE-2004-2532 affects the Serv-U FTP Server prior to version 5.1.0.0. The issue arises from a default administrator account and password that allow a local user to authenticate to the server, create a new user, log in as that user, and then issue a SITE EXEC command to execute arbitrary commands ...

CVE-2004-2487

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via 1 "..", 2 ".." backslash dot dot, or 3 "/../" sequences in a RETR get, b NLST ls, c LIST ls, d RNFR, or e RNTO FTP commands...

CVE-2004-2488

The CVE-2004-2488 entry concerns Nexgen FTP Server prior to version 2.2.3.23. It describes a directory traversal vulnerability that allows remote authenticated users to read or list arbitrary files through “C:” sequences in the RETR, NLST, LIST, RNFR, and RNTO FTP commands. Affected software: Nex...

CVE-2004-2487

CVE-2004-2487 concerns Nexgen FTP Server before 2.2.3.23, where authenticated remote users can read or list arbitrary files via directory traversal sequences in FTP commands (RETR, NLST, LIST, RNFR, RNTO). Affected component is the FTP command handling in Nexgen server; root cause: traversal sequ...

CVE-2004-2488

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via "C:" sequences in the 1 RETR get, 2 NLST ls, 3 LIST ls, 4 RNFR, or 5 RNTO FTP commands...

CVE-2004-2532

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...

CVE-2004-2533

Serv-U FTP Server 4.1 possibly 4.0 allows remote attackers to cause a denial of service application crash via a SITE CHMOD command with a "\..." followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111...

CVE-2005-3294

Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service crash by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected...

CVE-2005-3294

CVE-2005-3294 affects TYPSoft FTP Server 1.11 (and 1.10) with Sub Directory Include enabled, enabling remote DoS by sending multiple RETR commands that crash the server. Descriptions across CVE/NVD and multiple advisories/exploits confirm RETR-based denial of service; no remediation/patch details...

CVE-2005-3296

The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in...

CVE-2005-3294

Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service crash by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected...

[SA17271] Squid FTP Server Response Handling Denial of Service

TITLE: Squid FTP Server Response Handling Denial of Service SECUNIA ADVISORY ID: SA17271 VERIFY ADVISORY: http://secunia.com/advisories/17271/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Squid 2.x http://secunia.com/product/310/ DESCRIPTION: M.A.Young has reported a...

TYPSoft FTP Server DoS

Crash on FTP RETR command before data connection open...

TYPSoft FTP Server <= 1.10 Multiple DoS

The remote host appears to be using TYPSoft FTP Server, a small FTP server for Windows. According to its banner, the version of TYPSoft FTP Server installed on the remote host is 1.10 or earlier. Such versions suffer from several denial of service vulnerabilities. A remote attacker, possibly usin...

TYPSoft FTP Server <= 1.11 (RETR) Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ================================================================= TYPSoft FTP Server 3 die "usage: perl typsoft-1.11-DOS.pl port\n" ; if$ARGV 2 $prt = $ARGV3 else $prt = "21" ; $adr = $ARGV0; $usr = $ARGV1; $pas = $ARGV2; $err1 = "RETR 0"; $err2 ...

TYPSoft FTP Server 1.11 - RETR Denial of Service

TYPSoft FTP Server 1.11 - RETR Denial of Service !/usr/bin/perl use IO::Socket; use Socket; print "\n-= TYPSoft FTP Server 3 die "usage: perl typsoft-1.11-DOS.pl port\n" ; if$ARGV 2 $prt = $ARGV3 else $prt = "21" ; $adr = $ARGV0; $usr = $ARGV1; $pas = $ARGV2; $err1 = "RETR 0"; $err2 = "RETR 1";...

[Full-disclosure] TYPSoft ftpd

EXPL-A-2005-016 exploitlabs.com Advisory 045 AFFECTED PRODUCTS TYPSoft FTP Server v1.11 and earlier http://www.typsoft.com/ OVERVIEW TYPSoft FTP Server is a fast and easy ftp server with support to Standard FTP Command, Clean interface, Virtual File System architecture, ability to resume Download...

TYPSoft FTP Server 1.11 - 'RETR' Denial of Service

!/usr/bin/perl use IO::Socket; use Socket; print "\n-= TYPSoft FTP Server 3 die "usage: perl typsoft-1.11-DOS.pl port\n" ; if$ARGV 2 $prt = $ARGV3 else $prt = "21" ; $adr = $ARGV0; $usr = $ARGV1; $pas = $ARGV2; $err1 = "RETR 0"; $err2 = "RETR 1"; $remote = IO::Socket::INET-newProto="tcp",...

GLSA-200510-09 : Weex: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-09 Weex: Format string vulnerability Ulf Harnhammar discovered a format string bug in Weex that can be triggered when it is first run or when its cache files are rebuilt, using the -r option. Impact : An attacker could setu...