CVE-2005-1666: Undefined Security Weakness

Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the 1 ftpxlatepath, 2 ftpiscanonical, or 3...

Fastream NETFile Web / FTP server ftp bounce attack

It's possible to use FTP to bounce data to third party...

CVE-2005-1484

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

CVE-2005-1485

Golden FTP Server Pro 2.52 is affected by an information-disclosure vulnerability: when a GET request targets a non-existent file, the FTP error response reveals the absolute path of the server. This is a server-side path disclosure issue that can aid an attacker in mapping the environment. The p...

CVE-2005-1484

Golden FTP Server Pro 2.52 is vulnerable to a directory traversal flaw where a GET request containing a "\.." sequence prefixed by a """ can read files outside the share. Root cause is improper handling of backslash-dot-dot traversal, enabling reading of arbitrary files with partial confidentiali...

CVE-2005-1485

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...

CVE-2005-1484

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

CVE-2005-1485

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...

CVE-2005-1485: Undefined Security Weakness

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message...

CVE-2005-1484: Undefined Security Weakness

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...

RaidenFTPD Multiple Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability. An authenticated attacker could exploit this to read and write arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description...

RaidenFTPD urlget Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability that could allow an attacker to read arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18225; scriptversion"1.18"...

CVE-2004-1992

CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...

CVE-2004-2037

CVE-2004-2037 describes a buffer overflow in Mollensoft Lightweight FTP Server 3.6. The flaw allows remote authenticated users to crash the server and potentially execute arbitrary code by sending a long CWD command (e.g., via an interactive FTP client). Documents identify the affected product an...

CVE-2004-1992

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...

CVE-2004-1783

CVE-2004-1783 refers to a directory traversal vulnerability in Net2Soft Flash FTP Server 1.0. Multiple connected sources (OpenVAS and RH/Red Hat metadata) confirm that a remote attacker can abuse a /.. path to read and create arbitrary files on affected systems, indicating potential impact on con...

CVE-2004-1783

Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. slash dot dot...

CVE-2004-2037

Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client...

CVE-2004-1992: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...

CVE-2004-1783: Undefined Security Weakness

Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. slash dot dot...