GlobalSCAPE Secure FTP Server (gsftps) Custom Command Long Parameter DoS

GlobalSCAPE Secure FTP Server is installed on the remote Windows host. According to the registry, the version of GlobalSCAPE Secure FTP Server on the remote host is affected by a denial of service vulnerability involving a lengthy parameter line to an unspecified custom command. C Tenable Network...

[SA19547] GlobalSCAPE Secure FTP Server Custom Command Denial of Service

TITLE: GlobalSCAPE Secure FTP Server Custom Command Denial of Service SECUNIA ADVISORY ID: SA19547 VERIFY ADVISORY: http://secunia.com/advisories/19547/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: GlobalSCAPE Secure FTP Server 2.x http://secunia.com/product/3219/ GlobalSCAPE...

FTP Writeable Directories

The remote FTP server contains world-writeable files. By crawling through the remote FTP server, several directories were marked as being world writeable. SPDX-FileCopyrightText: 2006 TNS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Directory traversal

Directory traversal vulnerability in Baby FTP Server BabyFTP 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not...

CVE-2006-1383

Directory traversal vulnerability in Baby FTP Server BabyFTP 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not...

CVE-2006-1383

Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine the existence of files outside the intended document root by unspecified manipulations that trigger different error messages based on file existence. Impact: partial confidentiality ...

CVE-2006-1383

Directory traversal vulnerability in Baby FTP Server BabyFTP 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not...

CVE-2003-1299

Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." triple dot manipulations to the CWD command...

CVE-2002-2209

CVE-2002-2209 concerns an unspecified security vulnerability in Baby FTP Server versions before November 7, 2002 . The description provides no details on the root cause, exploit vector, or exact impact, only noting an unknown impact and attack vectors. The NVD entry lists a high base score (10.0)...

CVE-2003-1299

CVE-2003-1299 affects Baby FTP Server 1.2. A directory traversal flaw via the CWD command using triple dots (… ) enables remote authenticated users to list arbitrary directories and possibly read files. The description does not specify patches or fixed versions in the provided documents. Impact i...

CVE-2003-1300

Affected: Baby FTP Server (BabyFTP) 1.2 and possibly earlier versions before May 31, 2003. Vulnerability: remote denial-of-service caused by a large number of connections from the same IP, which triggers an access violation. Root cause not explicitly stated in provided documents. Impact: denial o...

CVE-2002-2209

Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors...

CVE-2003-1300

Baby FTP Server BabyFTP 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a large number of connections from the same IP address, which triggers an access violation...

CVE-2003-1300: Undefined Security Weakness

Baby FTP Server BabyFTP 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a large number of connections from the same IP address, which triggers an access violation...

CVE-2006-1383: Undefined Security Weakness

Directory traversal vulnerability in Baby FTP Server BabyFTP 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not...

CVE-2002-2209: Undefined Security Weakness

Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors...

CVE-2003-1299: Undefined Security Weakness

Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." triple dot manipulations to the CWD command...

[SA19338] Baby FTP Server File Enumeration Weakness

TITLE: Baby FTP Server File Enumeration Weakness SECUNIA ADVISORY ID: SA19338 VERIFY ADVISORY: http://secunia.com/advisories/19338/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Baby FTP Server 1.x http://secunia.com/product/1626/ DESCRIPTION: Ziv Kami...

Baby FTP Server file enumeration information leak

Different messages for existing and non-existing user outside FTP home directory...

[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...