CVE-2005-0798

Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks...

CVE-2005-0798

The CVE-2005-0798 entry concerns Novell iChain Mini FTP Server 2.3 (and possibly earlier versions) failing to limit incorrect login attempts, enabling brute-force login attacks over the network. The underlying issue is insufficient authentication attempt throttling on the FTP service, allowing re...

CVE-2005-0797

The CVE-2005-0797 entry concerns Novell iChain Mini FTP Server 2.3, where authentication error handling reveals whether a user exists. This information disclosure can facilitate brute-force attempts, since attackers can iterate valid usernames more efficiently. The available sources confirm the a...

CVE-2005-0798: Undefined Security Weakness

Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks...

CVE-2005-0797: Exposure of Sensitive Information to an Unauthorized Actor

Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks...

[ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability

|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 03.15.2005 || .:: SUMMARY Novell iChain Mini FTP Server Valid User Disclosure Vulnerability Version: IChain Version v2.3, It is suspected that all previous versions of IChan are vulnerable. .:: BACKGROUND The Novell iChain product...

[ISR] - Novell iChain Mini FTP Server Bruteforce Problem

|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 03.15.2005 || .:: SUMMARY Novell iChain Mini FTP Server Bruteforce Problem .:: BACKGROUND The Novell iChain product provides identity-based web security services that control access to application and network resources across...

[ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability

|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 03.15.2005 || .:: SUMMARY Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability Version: IChain Version v2.3, It is suspected that all previous versions of IChan are vulnerable. .:: BACKGROUND The Novell...

CVE-2005-0798

Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks...

ad20050303.txt

Gene6 FTP Server Local Privilege Escalation Vulnerability By Sowhat 03.Mar.2005 http://secway.org/Advisory/ad20050303.txt Product: Gene6 FTP Server Vendor: Gene6 Sarl Inc. 1 Introduction Gene6 FTP Server is a popular FTP Server for Microsoft Windows platforms. For more information:...

CVE-2005-0746

CVE-2005-0746 affects the Mini FTP server component of Novell iChain 2.2 and 2.3 SP2 and earlier, where remote unauthenticated attackers can obtain the full server path by issuing the PWD command. The available connected documents confirm the vulnerability description and affected versions, but d...

CVE-2005-0746: Undefined Security Weakness

The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command...

[SA14537] Novell iChain FTP Server Path Disclosure Weakness

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Gene6 FTP Server privilege escalation

Administration interface has no access restriction, allowsing any local user to execute commands with SYSTEM privileges...

Gene6 FTP Server Local Privilege Escalation Vulnerability

Gene6 FTP Server Local Privilege Escalation Vulnerability By Sowhat 03.Mar.2005 http://secway.org/Advisory/ad20050303.txt Product: Gene6 FTP Server Vendor: Gene6 Sarl Inc. 1 Introduction Gene6 FTP Server is a popular FTP Server for Microsoft Windows platforms. For more information:...

ArGoSoft FTP Server DELE Command Remote Buffer Overrun

According to its banner, the version of ArGoSoft FTP Server installed on the remote host is affected by a heap-based buffer overflow that can be triggered by a malicious user with delete rights who issues a DELE command with an argument exceeding 2000 characters. C Tenable Network Security, Inc...

CVE-2005-0690

CVE-2005-0690 affects Gene6 FTP Server. The issue arises from improper restriction of access to the control console, enabling local users to modify server configuration and gain privileges (demonstrated via SITE command). Exploitation details, affected versions, and fixes are not provided in the ...

CVE-2005-0696

CVE-2005-0696 refers to a heap-based buffer overflow in ArGoSoft FTP Server triggered by a DELE command with a very long argument (reported on versions including 1.4.2.8 and later 1.4.3.5). The vulnerability allows a remote authenticated user to potentially execute arbitrary code. The issue is de...

CVE-2005-0696

Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5...

CVE-2005-0690

Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command...