CVE-2001-1300

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2001-1300

Dynu FTP server

CVE-2002-0336

Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / slash, wildcard, and .. characters...

CVE-2002-0336

CVE-2002-0336 describes a buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier. The issue can be triggered by a LIST command containing a large number of /, *, and .. characters, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The pr...

CVE-2001-1300: Undefined Security Weakness

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2002-0264: Undefined Security Weakness

PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges...

CVE-2002-0336: Undefined Security Weakness

Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / slash, wildcard, and .. characters...

3CDaemon DoS exploit

3Cdaemon 2.0 revision 10 for the Windows platform contains a BOF vulnerability at all times, including the login prompt. When 400+ chars are sent to the FTP server, it crashes emmediatly. Remote exploit is included. For more details see the exploit as well. greets, skyrim - [email protected] MaD...

FTP bounce attack through Raptor Firewall

It;s possible to make FTP server behind firewall to connect to any IP and TCP port in internal network, since PORT command with internal adress doesn't processed correctly...

3CDaemon 2.0 - Buffer Overflow (1)

3CDaemon 2.0 - Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4638/info 3CDaemon is an FTP server developed by Dan Gill of 3Com. Reportedly, it is possible to initiate a buffer overflow on a host running 3CDaemon. Submitting an unusually large amount of data to the ftp server, cou...

3CDaemon 2.0 - Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/4638/info 3CDaemon is an FTP server developed by Dan Gill of 3Com. Reportedly, it is possible to initiate a buffer overflow on a host running 3CDaemon. Submitting an unusually large amount of data to the ftp server, could trigger a stack-based overflow...

CVE-2001-1228

Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server...

CVE-2001-1228

CVE-2001-1228 describes buffer overflows in gzip (notably versions from 1.2.4 and 1.3x and other releases) that could allow code execution via a long filename, potentially when gzip is used on an FTP server. Connected documents corroborate the vulnerability and point to advisories (e.g., Debian D...

CVE-2001-1228: Undefined Security Weakness

Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server...

MS02-018: Microsoft IIS FTP Status Request DoS (uncredentialed check)

It was possible to make the remote FTP server crash by sending the command 'STAT ?AAAAA....AAAAA'. There is a bug in certain versions of Microsoft's FTP server that can be exploited in this fashion. Other FTP servers may also react adversely to such a string. An attacker may leverage this issue t...

Typsoft FTP Server: yet another directory traversal vulnerability

Method: simple directory traversal Risk: Medium Website: www.typsoft.com updated version available Hello All versions of TYPSoft FTP Server 0.97.1 and previous, but not tested are vulnerable to another directory traversal vulnerability than the one already published on BugTraq. A directory...

Netwin Surge FTP Server does not adequately validate user input thereby allowing directory traversal

Overview Surge FTP Server 2.0a contains a directory traversal vulnerability. Description Surge FTP Server 2.0a allows remote users to list files outside the FTP root directory. --- Impact Attackers may list files from directories to which access was not granted. --- Solution Upgrade to version...

CVE-2002-0126

Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...

CVE-2001-1142

The CVE-2001-1142 entry concerns ArGoSoft FTP Server 1.2.2.2, which uses weak password encryption. The underlying issue, as described in the connected sources, is that passwords stored in the password file are protected by weak encryption, enabling an attacker with access to that file to gain pri...

CVE-2002-0126

CVE-2002-0126 : Buffer overflow in BlackMoon FTP Server 1.0–1.5 allows remote code execution via a long argument to (1) USER, (2) PASS, or (3) CWD. Affected software is BlackMoon FTP Server; underlying cause is overflow in handling overly long commands/arguments. Impact per the entry is remote ar...