CVE-2003-1329

CVE-2003-1329 affects wu-ftpd 2.6.2 ftpd.c. On OSes that allow only one non-connected socket bound to the same local address, it does not close failed connections, enabling remote denial-of-service. Risk data (NVD) assigns CVSSv2 base score 7.8 (HIGH) with network attack vector and no authenticat...

realpath() BSD and wu-ftpd / BSD FTP / SSH buffer overflow

off-by-one overflow in fbrealpath function in oversized path of few FTP commands...

CVE-2003-1327

CVE-2003-1327 affects wu-ftpd 2.6.2 and earlier when compiled with the MAIL_ADMIN option. A bounds/overflow issue in the SockPrintf path used to construct administrator notifications can allow remote anonymous users to execute arbitrary code by uploading a file with a very long pathname. The vuln...

CVE-2003-1327

Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAILADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow wh...

Command injection

BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command, a variant of CVE-1999-0017...

CVE-2007-2150

BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command, a variant of CVE-1999-0017...

CVE-2007-2150

BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command, a variant of CVE-1999-0017...

CVE-2007-2150

BlueArc Titan 2x00 devices running firmware 4.2.944b are affected by CVE-2007-2150, allowing remote attackers to redirect traffic to external sites using the FTP PORT command (FTP bounce), a variant of CVE-1999-0017. The issue is tied to BlueArc-FTPD parsing of PORT-based redirects and represents...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

DEBIAN-CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7094

CVE-2006-7094 affects ftpd used by Gentoo and Debian Linux. The root cause is that the daemon sets the group ID to the effective UID instead of the effective GID before executing /bin/ls, allowing remote authenticated users to list arbitrary directories with the privileges of gid 0 and potentiall...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

/bin/ls with gid=0 in Debian linux-ftpd

Mea culpa. A stupid little bug crept into linux-ftpd for Debian, and some other Linux distros. Some may have fixed it, but Debian hasn't. The effect is that ftpd now runs /bin/ls for DIR and similar commands with GID=0. Does not seem terribly dangerous as I do not seem able to trick ls into runni...

Linux ftpd ls privilege escalation

ls command is executed with effective gid 0...

Tiny FTPd buffer overflow

Buffer overflow in User command...

CVE-2006-7007

Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service daemon crash via a long USER command, a different vector than CVE-2000-0133...

CVE-2006-7007

CVE-2006-7007 describes a buffer overflow in Tiny FTPd (versions 1.4 and earlier) that can cause a denial of service (daemon crash) by sending a long USER command. The vulnerability affects Tiny FTPd’s handling of USER and is separate from CVE-2000-0133. Public references exist (SecurityVulns: Ti...