Xftp < 3.0 Build 242 LIST Response Buffer Overflow

The version of Xftp, an FTP client for Windows, installed on the remote host is older than 3.0 Build 242. Such versions are reportedly affected by a buffer overflow vulnerability. By tricking a user into double-clicking on a file name included in the 'LIST' command response from a malicious FTP...

XFTP 3.0 Build 02.39 Long Filename Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

XFTP 3.0 Build 0239 Long filename Buffer Overflow

Exploit for windows platform in category remote exploits ================================================= XFTP 3.0 Build 0239 Long filename Buffer Overflow ================================================= !/usr/bin/python import socket import sys """...

XFTP 3.0 Build 0239 - Filename Remote Buffer Overflow

XFTP 3.0 Build 0239 - Filename Remote Buffer Overflow !/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// //...

XFTP 3.0 Build 0239 - 'Filename' Remote Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

NetSarang Xftp 3.0 PWD响应栈溢出漏洞

BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...

NetSarang Xlpd 3.0远程拒绝服务漏洞

Bugraq ID: 36610 NetSarang Xlpd是一款windows平台下的LPD应用程序。 NetSarang Xlpd不正确处理用户输入，远程攻击者可以提交恶意请求使服务程序停止响应。 NetSarang Xlpd 3.0 厂商解决方案: 目前没有详细解决方案提供： http://www.netsarang.com/products/xlpdetail.html !/usr/bin/perl Software: XLPD 3.0 Remote DoS Found By: Francis Provencher Protek Research Lab's Tested On...

XLPD 3.0 - Remote Denial of Service

XLPD 3.0 - Remote Denial of Service Application: XLPD 3.0 Remote DoS Platforms: Windows XP Professional SP2 crash: YES Exploitation: remote DoS Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

Unfixed XSS vulnerability at www.netsarang.com

Security researcher xylitol, has submitted on 23/07/2008 a cross-site-scripting XSS vulnerability affecting www.netsarang.com, which at the time of submission ranked 594075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2008. It is...

CVE-2006-0148

NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service crash via a large number of connections from the same IP address...

Code injection

NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service crash via a large number of connections from the same IP address...

CVE-2006-0148

NetSarang Xlpd 2.1 is affected by CVE-2006-0148: a denial-of-service condition triggered by a high volume of connections from a single IP address that can crash the service. The available sources (NVD/NIST) describe remote DoS potential but do not specify exploit details, exploit status, or a con...

CVE-2006-0148

NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service crash via a large number of connections from the same IP address...