51 matches found
CVE-2001-0768
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file...
CVE-2001-0767
Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in 1 LS or 2 GET...
CVE-2001-0769
Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character...
CVE-2001-0768
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file...
CVE-2001-0768
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, allowing local users to gain privileges as other FTP users by reading the file. This is a local privilege escalation through credential disclosure; no exploit specifics are provided in the available documents. R...
CVE-2001-0767
Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in 1 LS or 2 GET...
CVE-2001-0767
CVE-2001-0767 corresponds to a directory traversal flaw in GuildFTPd. Multiple sources (NVD and OpenVAS entries) document that versions around 0.9x/0.97 are affected, allowing an attacker with a valid FTP login to read arbitrary files and directories by inserting .. in FTP commands (LS or GET). T...
def-2001-27: GuildFTPD Buffer Overflow and Memory Leak DoS
====================================================================== Defcom Labs Advisory def-2001-27 GuildFTPD Buffer Overflow and Memory Leak DoS Author: Andreas Junestam [email protected] Co-Author: Janne Sarendal [email protected] Release Date: 2001-05-22...
GuildFTPD v0.97 Directory Traversal / Weak password encryption
GuildFTPD v0.97 Directory Traversal / Weak password encryption AFFECTED SYSTEMS GuildFTPD v0.97 tested on Windows 9x, probably works on NT / 2k as well DESCRIPTION 1 Directory Traversal Consider the following FTP session I'm using windows' FTP.EXE proggie, and its associated commands : The...
GuildFTPd Traversal Arbitrary File Enumeration
The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. This is caused by the server responding with different error messages depending on if the file exists or not. An attacker may use this flaw to gain more...