[Full-Disclosure] Fun with /bin/ls, yet still ls better than windows

Georgi Guninski security advisory 62, 2003 Fun with /bin/ls, yet still ls better than windows Systems affected: coreutils - /bin/ls, wu-ftpd DoS Fixed in CVS Risk: Low Date: 22 October 2003 Legal Notice: This Advisory is Copyright c 2003 Georgi Guninski. You may distribute it unmodified. You may...

Coreutils 4.5.x - LS Width Argument Integer Overflow

source: https://www.securityfocus.com/bid/8875/info Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been reported that excessive values passed as a width argumen...

Coreutils 4.5.x - LS Width Argument Integer Overflow

Coreutils 4.5.x - LS Width Argument Integer Overflow source: https://www.securityfocus.com/bid/8875/info Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been...

CVE-2001-1113: Undefined Security Weakness

Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R recursive command...

CVE-2001-0697: Undefined Security Weakness

NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service crash via an 'ls ..' command...

CVE-2001-0933: Undefined Security Weakness

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:"...

CVE-2001-1031: Undefined Security Weakness

Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via 1 a .. dot dot in the ls/LIST command, or 2 a ... in the cd/CWD command...

CVE-2001-0931: Undefined Security Weakness

Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. dot dot in 1 LS or 2 GET...

CVE-2001-0767: Undefined Security Weakness

Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in 1 LS or 2 GET...

CVE-1999-1022

CVE-1999-1022 affects the IRIX serial_ports administrative program on IRIX 4.x/5.x. It trusts the user’s PATH to locate ls, enabling a local user to gain root privileges with a Trojan horse ls. No remediation details are provided in the supplied documents.

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0452: Undefined Security Weakness

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0255: Undefined Security Weakness

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name e.g. C: in the requested pathname...

CVE-1999-0219: Undefined Security Weakness

Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service crash via a long 1 CWD or 2 LS list command...