GLSA-200407-04 : Pure-FTPd: Potential DoS when maximum connections is reached

The remote host is affected by the vulnerability described in GLSA-200407-04 Pure-FTPd: Potential DoS when maximum connections is reached Pure-FTPd contains a bug in the acceptclient function handling the setup of new connections. Impact : When the maximum number of connections is reached an...

WU-FTPD S/KEY Authentication ftpd.c skey_challenge Function Remote Overflow

This version of WU-FTPD contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary code resulting in a loss of integrit...

WU-FTPD MAIL_ADMIN Function Remote Overflow

Th remote Wu-FTPD server fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the user Wu-Ftpd runs as usually root resulting in a loss of...

NetBSD Security Advisory 2004-009: ftpd root escalation

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...

WU-FTPD < 2.6.3 Multiple Vulnerabilities

Binary data 1208.prm...

WU-FTPD < 2.6.0 'SITE NEWER' Command Memory Exhaustion DoS

Binary data 1807.prm...

WU-FTPD < 2.6.1 Glob Command Overflow

Binary data 1811.prm...

VXWorks ftpd CEL Command Overflow DoS

Binary data 1814.prm...

WU-FTPD Server Detection

Binary data 1850.prm...

WU-FTPD < 2.6.1 'SITE EXEC' Command Overflow

Binary data 1808.prm...

HP-UX ftpd glob() Expansion STAT Command Remote Overflow

Binary data 1819.prm...

WU-FTPD < 2.6.2 PASV Command Format String Arbitrary Code Execution

Binary data 1809.prm...

WU-FTPD < 2.4.3 Directory Structure Processing Overflow

Binary data 1810.prm...

[SA12320] Heimdal ftpd Signal Handling Vulnerabilities

TITLE: Heimdal ftpd Signal Handling Vulnerabilities SECUNIA ADVISORY ID: SA12320 VERIFY ADVISORY: http://secunia.com/advisories/12320/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Heimdal 0.6.x http://secunia.com/product/3299/ DESCRIPTION:...

WU-FTPD ABOR Command Arbitrary File Access

The version of WU-FTPD running on the remote host contains a flaw that may allow a malicious user to gain access to unauthorized privileges. Specifically, there is a flaw in the way that the server handles an ABOR command after a data connection has been closed. The flaw is within the dologout...

WU-FTPD rnfr File Overwrite

The remote WU-FTPD server seems to be vulnerable to a remote flaw. This version contains a flaw that may allow a malicious user to overwrite arbitrary files. The issue is triggered when an attacker sends a specially formatted rnfr command. This flaw will allow a remote attacker to overwrite any...

Mandrake Linux Security Advisory : wu-ftpd (MDKSA-2001:090)

A vulnerability in wu-ftpd's ftpglob function was found by the CORE ST team. This vulnerability can be exploited to obtain root access on the FTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux...

Solaris 2.6 (sparc) : 106301-06

SunOS 5.6: /usr/sbin/in.ftpd patch. Date this patch was last updated by Sun : Jul/09/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

FreeBSD : wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed (201)

The following package needs to be updated: wu-ftpd+ipv6 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3b7c7f6c710211d8873f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : wu-ftpd (RHSA-2003:246)

Updated wu-ftpd packages are available that fix an off-by-one buffer overflow. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between machines. An off-by-one bug has been discovered in versions of wu-ftpd up t...