RobotFTP DoS

The remote host seems to be running RobotFTP. RobotFTP server has been reported prone to a denial of service vulnerability. The issue presents itself when certain commands are sent to the service, before authentication is negotiated. The following versions of RobotFTP are vulnerable: RobotFTP...

NiteServer FTP directory traversal

The remote FTP server allows anybody to switch to the root directory and read potentialy sensitive files. OpenVAS Vulnerability Test $Id: niteserverftpdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: NiteServer FTP directory traversal Authors: Michel Arboi Copyright: Copyright C 2003...

RaidenFTPD Directory Traversal flaw

The remote host is running the RaidenFTPD FTP server. The remote version of this software is vulnerable to a directory traversal flaw. A malicious user could exploit it to gain read and write access to the outside of the intended ftp root. OpenVAS Vulnerability Test $Id: raidenftpddirtraversal.na...

SunFTP Buffer Overflow

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands by sending more than 2100 characters to the server. OpenVAS Vulnerability Test $Id: sunftpdoverflow.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SunFTP Buffer...

Platinum FTP Server

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server: The 'dir' command can be used to examine the filesystem of the machine and gather further information about the hos...

4D WebStar Symbolic Link Vulnerability

The remote server is running 4D WebStar FTP Server. 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Successful...

HP-UX ftpd glob() Expansion STAT Buffer Overflow

Buffer overflow in FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. OpenVAS Vulnerability Test $Id: hpftpglobstat.nasl 6522 2017-07-04 15:22:28Z cfischer $...

Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

BSD ftpd Single Byte Buffer Overflow

One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. OpenVAS Vulnerability Test $Id: ftpd1byteoverflow.nasl 6522 2017-07-04 15:22:28Z cfischer $ Description: BSD ftpd Single Byte Buffer Overflow Authors: Xue Yong Zhi Copyright:...

TYPSoft empty username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. By sending an empty login username, an attacker can cause the ftp server to crash, denying service to legitimate users. OpenVAS Vulnerability Test $Id:...

wu-ftpd ls -W memory exhaustion

The FTP server does not filter arguments to the ls command. It is possible to consume all available memory on the machine by sending ls '-w 1000000 -C' See http://www.guninski.com/binls.html OpenVAS Vulnerability Test $Id: wuftpdlsDoS.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: wu-ftpd l...

TypSoft FTP STOR/RETR DoS Vulnerability

The remote FTP server crashes when it is sent the command RETR ../../ or STOR ../../ SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GuildFTPd Long SITE Command Overflow Vulnerability (2001)

The remote FTP server seems to be vulnerable to denial service attack through the SITE command when handling specially long request. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ArGoSoft FTP Server XCWD Overflow

The remote host is running the ArGoSoft FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

WS FTP Server DoS Vulnerability (Nov 2005)

WSFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Titan FTP Server <= 2.02 Directory Traversal Vulnerability

Titan FTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TYPSoft empty username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

EFTP < 2.0.8.348 Information Disclosure Vulnerability

The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...

CVE-2005-3467

CVE-2005-3467 affects Serv-U FTP Server prior to 6.1.0.4. The vulnerability enables a denial-of-service (crash) via malformed packets and potentially other issues with unknown impact; a second vector involves the use of a tilde (~) in a pathname, and a third involves memory consumption of the dae...