War FTP Daemon CWD/MKD Overflow DoS

Binary data 1849.prm...

CVE-2004-0342

CVE-2004-0342 affects WFTPD Pro Server 3.21 Release 1 when XeroxDocutech is enabled. A denial-of-service (crash) can be triggered by local users issuing MKD or XMKD commands that build an absolute path of 260 characters, which overwrites a cookie with a null character—likely due to an off-by-one ...

PT-2004-1496 · Texas Imperial · Wftpd Pro Server

Name of the Vulnerable Software and Affected Versions: WFTPD Pro Server version 3.21 Release 1 Description: The issue allows local users to cause a denial of service, resulting in a crash, by utilizing specific commands. This can be achieved via a 1 MKD or 2 XMKD command that causes an absolute...

WarFTPd CWD/MKD Command Overflow

The version of the War FTP Daemon running on this host is vulnerable to a buffer overflow attack. This is due to improper bounds checking within the code that handles both the CWD and MKD commands. By exploiting this vulnerability, it is possible to crash the server. This script was written by Er...

CVE-2002-2393

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service no new connections via a series of MKD commands...

CVE-2002-1920

Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service crash via a MKD command with a long directory name...

Переполнение кучи в Eserv

Переполнение кучи в FTP-сервере команда MKD. Поскольку переполнение затрагивает только одну нить процесса, не известно, возможно ли использовать ошибку даже для DoS-атаки...

Etype Eserv 2.9.2 - Logging Buffer Overflow

source: https://www.securityfocus.com/bid/1315/info EType EServ is a combination mail, news, HTTP, FTP, and proxy server. The logging mechanism in EType EServ is vulnerable to a heap buffer overflow that could allow remote attackers to execute arbitrary code on the server. The overflow occurs whe...

Etype Eserv 2.9.2 - Logging Buffer Overflow

Etype Eserv 2.9.2 - Logging Buffer Overflow source: https://www.securityfocus.com/bid/1315/info EType EServ is a combination mail, news, HTTP, FTP, and proxy server. The logging mechanism in EType EServ is vulnerable to a heap buffer overflow that could allow remote attackers to execute arbitrary...

CVE-2000-0131

CVE-2000-0131: War FTP Daemon 1.6x is vulnerable to a buffer overflow in the CWD/MKD command handling due to improper bounds checking. This can enable a remote attacker to crash the server (DoS) via long MKD/CWD commands. Documented in several sources (OpenVAS/Nessus entries), with CVSSv2 base sc...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service

// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

WFTPD 2.34/2.40/3.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/747/info WFTPD is reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient bounds checking performed on MKD and CWD arguments. It is reported that superfluous data passed to MKD first and then to CWD results i...