330 matches found
CVE-2001-1386
WFTPD 3.00 is affected. The vulnerability allows remote attackers to read arbitrary files by uploading a file that ends in a ".lnk" extension, bypassing WFTPD’s check for that extension. Root cause is the handling of specially crafted (link) files that bypass the extension filter. Impact stated i...
Windows Help buffer overflow
Buffer overflow on :LNK processing in .CNT files...
CVE-2001-1043
The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...
EFTP .lnk File Handling Remote Overflow
The version of EFTP running on the remote host has a remote buffer overflow vulnerability. Issuing the LS command on a maliciously crafted .lnk file results in an overflow. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security,...
CVE-2001-1042
Transsoft Broker 5.9.5.0 is vulnerable: an attacker can upload a .lnk file that points to a target file, enabling remote reading of arbitrary files and directories. Root cause: mis-handling of .lnk file uploads allows access to target paths. Impact: read access to arbitrary files/directories on t...
Выход за пределы корневой директории с помощью .lnk-Файлов в ftp-серверах (directory traversal)
Поместив на сервер ярлык .lnk можно получить доступ к файлу находящемуся за пределами корневой папки FTP...
CVE-2000-0129
The vulnerability CVE-2000-0129 affects the Serv-U FTP server. A buffer overflow in SHGetPathFromIDList can be triggered by a LIST command on a malformed .lnk file, leading to a denial of service. Exploitation details are not provided in the documents. PT-2000-1115 notes affected versions are not...
CVE-2000-0129
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...
CVE-1999-0280
CVE-1999-0280: Remote command execution in Microsoft Internet Explorer via crafted .lnk and .url files. Affected software: Internet Explorer. Root cause: loading or processing of .lnk/.url shortcuts can execute arbitrary commands with the user’s privileges. Documented across multiple sources (NVD...
