17114 matches found
FlashFXP 1.4 User Password Encryption Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7499/info FlashFXP uses a trivially reversible algorithm to encrypt FTP user credentials. Local attackers with access to the sites.data may exploit this weakness to gain unauthorized access to FTP user credentials for...
SlimFTPd LIST Concatenation Overflow
No description provided by source. $Id: slimftpdlistconcat.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities
No description provided by source. BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac in...
Novell Netware - NWFTPD RMD/RNFR/DELE Argument Parsing Buffer Overflow
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 7 - Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-7-novell-netware-nwftpd-rmdrnfrdele-argument-parsing-buffer-overflow/ ''' ''' Title...
Wyse Rapport Hagent Fake Hserver - Command Execution
No description provided by source. $Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
cftp 0.12 Banner Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8160/info A buffer overflow vulnerability has been reported in cftp. The vulnerability occurs when cftp is parsing 'Welcome' banner messages from remote FTP servers. When cftp receives an FTP banner exceeding a certain...
Shadow Op Software Dragon Server 1.0/2.0 - Multiple DoS
No description provided by source. source: http://www.securityfocus.com/bid/1352/info Two denial of service vulnerabilities exist in the Dragon Server package, versions 1.00 and 2.00, from Shadow Ops Software. By supplying large arguments to two different network services, it is possible to cause...
FTPGetter 3.58.0.21 - Buffer Overflow (PASV) Exploit
No description provided by source. !/usr/bin/python Exploit Title: FTPGetter v3.58.0.21 Buffer Overflow PASV Exploit Date: 02/03/2011 Author: modpr0be Software Link: http://www.ftpgetter.com/ftpgettersetup.exe Vulnerable version: = 3.58.0.21 Tested on: Windows XP SP3 VMware Player 3.1.3...
Trellian FTP Client PASV BOF exploit
No description provided by source. Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server...
War-FTPD 1.65 Username Overflow
No description provided by source. $Id: warftpd165user.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
KDE FTP KIOSlave URI Arbitrary FTP Server Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application to properly sanitize...
BRS WebWeaver 1.0 1 MKDir Directory Traversal Weakness
No description provided by source. source: http://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory traversal notation...
FileWrangler 5.30 Stack Buffer Overflow
No description provided by source. $Id: filewranglerlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Xlight FTP Server <= 3.2 'user' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Cerberus FTP Server <= 2.32 Denial of Service Exploit
No description provided by source. / Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include stdio.h include sys/socket.h include sys/types.h include netinet/in.h include netdb.h define POCSTR %s int header; int usagechar...
FTPGetter Standard 3.55.0.05 - Stack Buffer Overflow (PWD)
No description provided by source. $Id: ftpgetterpwdreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Cerberus FTP Server 3.0.3 - Remote Denial of Service Exploit
No description provided by source. / vulnerab : Remote Denial of Service Command vulnerab : User Software : Cerberus FTP Server Versian : 3.0.3 website software : http://www.cerberusftp.com greetz : Str0ke Milw0rm is The best in world / include stdio.h include string.h include winsock2.h include...
PCMan's FTP Server 2.0 - Remote Buffer Overflow Exploit
No description provided by source...
Microsoft Internet Explorer 5.0.1 FTP URI Arbitrary FTP Server Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied URI input before using...
CesarFTP 0.99 g Remote CWD Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging,...