WU-FTPD 2.4.2/2.5 .0/2.6.0 - Remote Format String Stack Overwrite (1)

// source: https://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a very serious remote attack in the SITE EXEC implementation. Becau...

WU-FTPD 2.4.22.5 .02.6.0 - Remote Format String Stack Overwrite (1)

WU-FTPD 2.4.22.5 .02.6.0 - Remote Format String Stack Overwrite 1 // source: https://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a...

FTP client/server and listen() implementation

Here is exploit. It works as described in NAI 1996 bulletin http://www.nai.com/nailabs/aspset/advisory/ftp-paper.asp but.... there are two points i'm disagree with NAI. 1. ftp console client under FreeBSD 2.2.x IS vulnerable 2. Inspite I don't treat FTP as secured protocol IMHO it's OS/software...

AIX_ftpd_bof_exploit.txt

One of our crewmembers wrote this exploit for the Hack-me project during HIT2000, I searched on securityfocus and saw it was still not mailed over here. IBM has been mailed but due lack of RS6000 knowledge they didn't get it working..... !/usr/bin/perl Synnergy Networks Description: Remote...

CVE-1999-0880

Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly...

CVE-1999-0879

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file...

AIX FTPd libc Library Remote Buffer Overflow

It was possible to crash the remote FTP server by issuing the command : CEL aaaa...aaaa This problem is known as the 'AIX FTPd' overflow and may allow the remote user to easily gain access to the root super-user account on the remote system. C Tenable Network Security, Inc. include"compat.inc"; i...

CVE-1999-0054

Sun's ftpd daemon can be subjected to a denial of service...

CVE-1999-0082

CVE-1999-0082 affects ftpd via the CWD ~root command, enabling root access. Multiple connected sources confirm the issue in ftpd, describing that a specially crafted CWD ~root request can grant the attacker root privileges. The records do not provide concrete remediation details or patched versio...

CVE-1999-0035

CVE-1999-0035 concerns a race condition in the signal handling routine of ftpd, as reported across multiple feeds. The primary concrete detail is that the vulnerability affects ftpd and permits read/write of arbitrary files due to a race condition in its signal handling. The Red Hat and other ent...

CVE-1999-0054

Technical details about CVE-1999-0054 are not publicly available in the provided documents. The connected Red Hat/EUVD/CVE entries repeat the generic denial-of-service description without root-cause, affected versions, or fixes. Monitor for updates.

CVE-1999-0075

The CVE-1999-0075 issue affects the wu-ftpd daemon, where handling of a QUOTE PASV command after a username/password can cause a core dump. This vulnerability can lead to an information disclosure (core file containing usernames and passwords) and a forced denial of service via remote triggering ...

CVE-1999-0368

The CVE-1999-0368 issue involves buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD that can lead to remote root access (palmetto). Red Hat’s entry reiterates the same vulnerability. Nessus plugin 10318 (WU-FTPD Multiple Vulnerabilities) and 10318’s description cite the overflow as enabling...

CVE-1999-0035

Race condition in signal handling routine in ftpd, allowing read/write arbitrary files...

CVE-1999-0368

Buffer overflows in wuarchive ftpd wu-ftpd and ProFTPD lead to remote root access, a.k.a. palmetto...

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

CVE-1999-0789

Buffer overflow in AIX ftpd in the libc library...

IBM AIX 4.3.2 - 'ftpd' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/679/info A remote buffer overflow vulnerability in AIX's ftpd allows remote users to obtain root access. !/usr/bin/perl Synnergy Networks Description: Remote bufferoverflow exploit for ftpd from AIX 4.3.2 running on an RS6000. power This is an return into...

FreeBSD_FTP_port_holes.txt

Subject: [email protected]: FreeBSD Security Advisory: FreeBSD-SA-99:03.ftpd REISSUED To: [email protected] [email protected] 2.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xBE7497F1 Signed: 9/15/99 11:30:30 PM...

WU-FTPD Multiple Vulnerabilities (OF, Priv Esc)

It was possible to make the remote FTP server crash by creating a huge directory structure. This is usually called the 'wu-ftpd buffer overflow' even though it affects other FTP servers. An attacker can exploit this issue to crash the FTP server, or execute arbitrary code. C Tenable Network...