CVE-1999-0911

CVE-1999-0911 affects ProFTPD, wu-ftpd, and beroftpd. The vulnerability is a buffer overflow triggered by a sequence of MKD/CWD commands that create nested directories, allowing remote attackers to gain root privileges. Connected docs mention ProFTPD-related overflows (e.g., in 1.2.0pre4/pre6 var...

CVE-1999-0661

CVE-1999-0661 involves multiple widely-used packages (TCP Wrappers 7.6, util-linux 2.9g, wuftpd 2.2 and 2.1f, ircII 2.2.9, OpenSSH 3.4p1, Sendmail 8.12.6) that were replaced at distribution points by a Trojan Horse. The Red Hat advisory and other records corroborate the same core issue: compromis...

CVE-1999-0911

Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories...

CVE-1999-0156

CVE-1999-0156 affects wu-ftpd FTP daemon. The vulnerability allows any user and password combination, effectively bypassing authentication and potentially granting unauthorized access. Public sources in the provided documents confirm authentication bypass but do not specify concrete exploitation ...

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service // source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible ...

Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service

// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

CVE-2000-0133

Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands...

tinyftpd.exploit.txt

Hello, I translated a following message in BUGTRAQ-JPJapanese by proxy and forward this here. ------- Forwarded Message From: UNYUN To: [email protected] Hi, This is UNYUN@ShadowPenguinSecurity. Tiny FTPd 0.52 beta3 that is Windows FTP server has a buffer overflow vulnerability in...

CVE-1999-0955

Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command...

CVE-1999-0955

CVE-1999-0955 describes a race condition in wu-ftpd and BSDI ftpd that allows remote attackers to gain root access via the SITE EXEC command. Affected software includes wu-ftpd and BSDI ftpd; the underlying issue is a race in handling SITE EXEC. The vulnerability is remote-exploit via FTP, leadin...

CVE-1999-0879

CVE-1999-0879 describes a buffer overflow in WU-FTPD and related FTP servers that allows remote attackers to gain root privileges by exploiting macro variables in a message file. The vulnerability affects the FTP server software in the late 1990s era; multiple sources (including Red Hat CVE refer...

CVE-1999-0878

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPINGCHDIR...

CVE-1999-0878

CVE-1999-0878 describes a buffer overflow in WU-FTPD and related FTP servers, exploitable via MAPPING_CHDIR to gain root privileges. Affected component is the FTP server binary (WU-FTPD family); underlying cause is a directory-structure processing/overflow flaw that can crash the server or allow ...

CVE-1999-0879

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file...

CVE-1999-0880

Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly...

CVE-1999-0880

CVE-1999-0880 corresponds to a memory exhaustion DoS in WU-FTPD caused by the SITE NEWER command not freeing memory. Multiple connected sources confirm the issue and reference affected software as WU-FTPD, with a specific note that versions prior to 2.6.0 are vulnerable (Nessus plugin title indic...

WU-FTPD SITE NEWER Command Memory Exhaustion DoS

The remote WU-FTPD server accepts the command 'SITE NEWER'. Some WU-FTPD servers and probably others are vulnerable to a resource exhaustion where an attacker may invoke this command to use all the memory available on the server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CA-99-13: wu-ftpd upgrade available

...

Washington University WU-FTPD 2.5.0 - message Remote Buffer Overflow

Washington University WU-FTPD 2.5.0 - message Remote Buffer Overflow // source: https://www.securityfocus.com/bid/726/info There is a buffer overflow in wu-ftpd message file expansions which may be remotely exploitable. In situations where the message file can be written to in some way remotely b...