6448 matches found
FTP Writable Directories
By crawling through the remote FTP server, Nessus discovered several directories were marked as being world-writable. This could have several negative impacts : - Temporary file uploads are sometimes immediately available to all anonymous users, allowing the FTP server to be used as a 'drop' poin...
weex -- remote format string vulnerability
Emanuel Haupt reports: Someone who controls an FTP server that weex will log in to can set up malicious data in the account that weex will use, and that will cause a format string bug that will allow remote code execution. It will only happen when weex is first run or when its cache files are...
Guest permissions break 8 law-vulnerability and early warning-the black bar safety net
Guest privilege escalation method summary: Now the invasion is more and more difficult, People's safety awareness have generally increased a lot, even the individual user to understand firewalls, antivirus software and to equipment in hand, for Microsoft's patch to upgrade also no longer is not...
vxFtpSrv FTP server for Pocket PC buffer overflow
Buffer overflow on oversized USER command...
FTP Server Detection (Any Port)
Binary data 3222.prm...
SlimFTPd Username/Password Overflow Remote DoS
The remote host appears to be using SlimFTPd, a free, small, standards-compliant FTP server for Windows. The installed version of SlimFTPd on the remote host suffers from a denial of service vulnerability. By sending 'user' and 'pass' commands that are each 40 bytes long, an attacker will crash t...
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key // source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in a...
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
// source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in an XML file or the Windows Registry. This can allow t...
CVE-2005-2726
Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:" Windows drive letter sequences in commands such as 1 LIST or 2 RETR...
CVE-2005-2726
Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:" Windows drive letter sequences in commands such as 1 LIST or 2 RETR...
CVE-2005-2727
Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst...
CVE-2005-2727
CVE-2005-2727 affects Home Ftp Server 1.0.7. The issue arises because sensitive user and server information are stored in the same directory as the user’s home directory, enabling remote authenticated users to retrieve sensitive data by accessing ftpmembers.lst and ftpsettings.lst. The available ...
CVE-2005-2726
CVE-2005-2726 describes a directory traversal vulnerability in Home Ftp Server 1.0.7 that allows remote authenticated users to read arbitrary files by supplying Windows drive-letter paths such as “C:\” in commands like LIST or RETR. The condition is authenticated access; impact is partial disclos...
Multiple Vulnerabilities in Home Ftp Server 1.0.7
Donato Ferrante Application: Home Ftp Server http://downstairs.dnsalias.net/homeserver.html Version: 1.0.7 b45 Bugs: Multiple Vulnerabilities Date: 24-Aug-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...
Home FTP Server directory traversal
It's possible to obtain any file from remote system...
Home FTP Server Multiple Vulnerabilities
The remote host appears to be running Home Ftp Server, an FTP server application for Windows. The installed version of Home Ftp Server by default lets authenticated users retrieve configuration files which contain, for example, the names and passwords of users defined to the application as well a...
CVE-2004-2309
CVE-2004-2309 affects Crob FTP Server 3.5.1. A directory traversal vulnerability allows local users to browse outside the FTP root via multiple ../ in the DIR command. According to NVD, the impact is partial confidentiality with local access and no authentication barriers; no exploitation details...
CVE-2004-2366
The CVE references a buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2. An attacker could trigger a denial of service (crash) by sending a SITE command with a long argument, constituting a remote exploit vector against the affected server. The root cause is the overflow condition...