Meteor FTP Server buffer overflow

Buffer overflow on oversized FTP command...

CVE-2004-2089

Matrix FTP Server allows remote attackers to cause a denial of service crash by logging in using four spaces as the username and password and then issuing a LIST command...

CVE-2003-1206

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

CVE-2004-2089

CVE-2004-2089 affects Matrix FTP Server. The vulnerability (remote denial of service) occurs when an attacker logs in with four spaces as both username and password and then issues a LIST command, causing a crash. Documents do not provide root-cause details beyond this description, nor any offici...

CVE-2004-2081

The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service pmsystem.exe crash by issuing 1 a CD command with a tilde character or dot dot /../ or 2 a GET command for an unavailable file...

CVE-2003-1207

Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service crash via a dir command with a large number of "." characters followed by a "/" string...

CVE-2003-1206

The CVE-2003-1206 entry concerns Crob FTP Server 2.60.1. A format string vulnerability permits remote users to crash the server (denial of service) by sending format specifiers such as "%s" or "%n" in login username or in commands like DIR. The root cause is untrusted user input being treated as ...

CVE-2004-2081

S CVE-2004-2081 affects Sami FTP Server 1.1.3. Local users can trigger a denial of service (pmsystem.exe crash) by issuing FTP commands: (1) CD with a tilde (~) or /../, or (2) GET for an unavailable file. This is the vulnerability described in the CVE entry; exploitation details are not provided...

CVE-2004-2082

The CVE-2004-2082 entry describes a DoS in Sami FTP Server 1.1.3: remote authenticated users can crash pmsystem.exe by sending a GET request with a large number of leading “/” characters. This is the explicit vulnerability detail available in the records. No remediation or fix is provided in the ...

CVE-2003-1205

Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...

CVE-2004-2082

The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service pmsystem.exe crash via a GET request wit a large number of leading "/" slash characters...

CVE-2003-1205

CVE-2003-1205 affects Crob FTP Server 2.60.1. Affected component: the FTP server’s file-rename handling. Root cause: remote authenticated users can trigger a denial of service (crash) by renaming a file to the MS-DOS device name “con.” Impact: DoS via crash; no other impacts described in the prov...

CVE-2003-1207

CVE-2003-1207 affects Crob FTP Server 3.5.1. Remote authenticated users can cause a denial-of-service (crash) by issuing a dir command that contains a large sequence of "." characters followed by the string "/*". The available sources reiterate this vulnerability but do not provide additional exp...

CVE-2005-1666

Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the 1 ftpxlatepath, 2 ftpiscanonical, or 3...

CVE-2005-1646

The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of...

Fastream NETFile Web / FTP server ftp bounce attack

It's possible to use FTP to bounce data to third party...

CVE-2005-1485

Golden FTP Server Pro 2.52 is affected by an information-disclosure vulnerability: when a GET request targets a non-existent file, the FTP error response reveals the absolute path of the server. This is a server-side path disclosure issue that can aid an attacker in mapping the environment. The p...

CVE-2005-1484

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

CVE-2005-1484

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

CVE-2005-1484

Golden FTP Server Pro 2.52 is vulnerable to a directory traversal flaw where a GET request containing a "\.." sequence prefixed by a """ can read files outside the share. Root cause is improper handling of backslash-dot-dot traversal, enabling reading of arbitrary files with partial confidentiali...