Serv-U FTP Server Buffer Overflow

This module exploits a stack buffer overflow in the site chmod command in versions of Serv-U FTP Server prior to 4.2. You must have valid credentials to trigger this vulnerability. Exploitation also leaves the service in a non-functional state. Module Options msf use exploit/windows/ftp/servu/chm...

PT-2004-2782 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue involves multiple buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved by causing a large error string to be generated by the ALLO...

PT-2004-3380 · Nexgen · Nexgen Ftp Server

Name of the Vulnerable Software and Affected Versions: Nexgen FTP Server versions prior to 2.2.3.23 Description: The issue allows remote authenticated users to read or list arbitrary files via "C:" sequences in the 1 RETR get, 2 NLST ls, 3 LIST ls, 4 RNFR, or 5 RNTO FTP commands. This is a...

CVE-2001-1413

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries such as FTP server, may allow remote attackers to execute arbitrary code via a long filename argument...

DEBIAN-CVE-2001-1413

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries such as FTP server, may allow remote attackers to execute arbitrary code via a long filename argument...

CVE-2004-1277

The downloadselectionrecursive function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / slash characters...

CVE-2004-1281

The CVE-2004-1281 entry documents a vulnerability in junkie 0.3.1 where the ftp_retr function is exploitable by remote FTP servers to overwrite arbitrary files via .. sequences in a filename. This is a path-traversal issue allowing network-based exploitation with low complexity and no authenticat...

CVE-2004-1281

The ftpretr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. dot dot sequences in a filename...

CVE-2004-1280: Undefined Security Weakness

The guipopupviewfly function in guitviewpopup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename...

Crystal FTP Pro Client Buffer Overflow

Package: Crystal FTP Pro Auth: http://www.casdk.com/ Version: 2.8 current release and below Vulnerability Type: Arbitrary Command Execution Crystal FTP Pro Description from the Developer: Crystal FTP Pro is a Top awarded FTP client for dummies and experts. The state of the art user-interface used...

tnftp -- mget does not check for directory escapes

When downloading a batch of files from an FTP server the mget command does not check for directory escapes. A specially crafted file on the FTP server could then potentially overwrite an existing file of the user...

CVE-2004-1136: Undefined Security Weakness

Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service application crash via large replies to FTP commands...

CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability

Author: Hongzhen ZhouFortinet, Inc felixzhou at hotmail dot com DATE: 24/11/2004 PRODUCTS: CuteFTP Professional - FTP client for Windows. AFFECTED VERSION: Versions verified to be vulnerable: CuteFTP Professional 6.0 latest verson Other versions are not tested. DETAILS: When CuteFTP Professional...

Ipswitch WS_FTP Server 5.03 - RNFR Buffer Overflow

Ipswitch WSFTP Server 5.03 - RNFR Buffer Overflow ===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

WS-FTP Server 5.03 MKD Overflow

This module exploits the buffer overflow found in the MKD command in IPSWITCH WSFTP Server 5.03 discovered by Reed Arvin. Module Options msf use exploit/windows/ftp/wsftp/server503mkd msf undefinedserver503mkd show actions ...actions... msf undefinedserver503mkd set ACTION msf undefinedserver503m...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

CVE-2004-0252

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...

CVE-2004-0268

Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service hang via 1 a long cd command to the FTP server, or 2 a long dir command to the telnet server...

wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================== wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit ============================================================== / WodFtpDLX Client ActiveX Control Buffer Overflow Crash...

wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit

No description provided by source. / WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP Professional sp2 operating...