Inframail FTP Server NLST Command Remote Overflow

The remote host is running the FTP server component of Inframail, a commercial suite of network servers from Infradig Systems. According to its banner, the installed version of Inframail suffers from a buffer overflow vulnerability that arises when the FTP server component processes an NLST comma...

CVE-2002-1979

The CVE-2002-1979 issue affects WatchGuard SOHO firmware 5.1.6 and earlier, and Vclass/RSSA 3.2 SP1 and earlier. The vulnerability arises from sending a PASV command string as the argument to another command to an FTP server, causing a response that contains the PASV string. IPFilter then treats ...

CVE-2002-1943

SafeTP 1.46, when network address translation NAT is being used, leaks the internal IP address of the FTP server in a response to a passive mode PASV file transfer request...

CVE-2002-1943

The vulnerability CVE-2002-1943 affects SafeTP 1.46. When NAT is used, the internal FTP server IP address is leaked in responses to PASV (passive mode) FTP transfers. Root cause: NAT-related information disclosure in SafeTP’s PASV handling. Impact is partial confidentiality leakage; no integrity ...

CVE-2002-1978

IPFilter 3.1.1–3.4.28 is vulnerable to a remote‑exploit where an attacker sends a PASV string as the argument to another FTP command. The FTP server’s response then contains that string and IPFilter treats it as a legitimate PASV reply, effectively bypassing firewall rules. Affected product/funct...

CVE-2002-1978: Undefined Security Weakness

IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command...

KMiNT21.txt

Summary: Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 http://www.goldenftpserver.com/ Details: Passing an overly long username parameter to the FTP server causes the EIP register to be overwritten after the USER/PASS login sequence is completed. Once this has been do...

gftp security update

CentOS Errata and Security Advisory CESA-2005:410 An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A...

[Full-disclosure] Crob FTP Server remote buffer overflows

LSS Security Advisory LSS-2005-06-06 http://security.lss.hr Title: Crob FTP Server remote buffer overflows Advisory ID: LSS-2005-06-06 Date: 2005-06-01 Advisory URL: http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06 Impact: Remote code execution Risk Level: High Vulnerability Type:...

Crob FTP Server buffer overflow

Buffer overflow in different FTP commands...

Crob FTP Server <= 3.6.1 Remote Stack Overflow Exploit

No description provided by source. / CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic [email protected] LSS Security / http://security.lss.hr / include stdio.h include windows.h include time.h pragma comment...

Crob FTP Server <= 3.6.1 Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== Crob FTP Server LSS Security / http://security.lss.hr / include include include pragma comment lib,"ws232" char fzzrecv int sock fdset fds; struct timeval tv; static char buf10000; char...

CROB FTP Server Multiple Command Remote Overflow DoS

Binary data 2945.prm...

Crob FTP Server 3.6.1 - Remote Stack Overflow

/ CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic LSS Security / http://security.lss.hr / include include include pragma comment lib,"ws232" char fzzrecv int sock fdset fds; struct timeval tv; static char...

Hummingbird InetD FTP Server, LPD server multiple vulnerabilities

Buffer overflows, DoS...

CVE-2004-2111

Serv-U FTP Server prior to v4.2 is vulnerable to a stack-based buffer overflow in the SITE CHMOD command. A long filename can trigger arbitrary code execution by a remote attacker via FTP, as documented in CVE-2004-2111 (base CVSS v2.0 score 8.5). Multiple sources (exploit modules and OpenVAS/Ope...

CVE-2004-2111

Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...

CVE-2004-2111: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...

Meteor FTP Server buffer overflow

Buffer overflow on oversized FTP command...

Meteor FTP Server v1.5 Buffer Overflow

The overflow is triggered once a series of commands have been issued with specific criteria. In theory, using the USER command followed by a large amount of data will result in memory corruption as we have seen previously. However, if the PASS and PORT command are also issued with the right...