PT-2007-1197 · Oftpd · Oftpd

Name of the Vulnerable Software and Affected Versions: oftpd versions prior to 0.3.7 Description: The issue allows remote attackers to cause a denial of service, resulting in the daemon aborting. This is achieved by sending either an LPRT or LPASV command with an unsupported address family, which...

CVE-2006-6767: Reachable Assertion

oftpd before 0.3.7 allows remote attackers to cause a denial of service daemon abort via a 1 LPRT or 2 LPASV command with an unsupported address family, which triggers an assertion failure...

Oftpd 0.3.7 - Unsupported Address Family Remote Denial of Service

Oftpd 0.3.7 - Unsupported Address Family Remote Denial of Service source: https://www.securityfocus.com/bid/22073/info Oftpd Server is prone to a remote denial-of-service vulnerability because it mishandles unexpected user-supplied input. Exploiting this issue allows remote attackers to crash the...

Oftpd 0.3.7 - Unsupported Address Family Remote Denial of Service

source: https://www.securityfocus.com/bid/22073/info Oftpd Server is prone to a remote denial-of-service vulnerability because it mishandles unexpected user-supplied input. Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. Oftpd...

oftpd: Denial of service

Background oftpd is a small, anonymous only ftp daemon. Description By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact Remote, unauthenticated attackers may be able to terminate any oftpd process,...

CVE-2005-2239

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...

CVE-2005-2239

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...

CVE-2005-2239

CVE-2005-2239 affects oftpd 0.3.7. The vulnerability allows remote attackers to cause a denial of service by sending a USER command containing a large sequence of null (\0) characters. This is documented across multiple sources (NVD, Red Hat, Ubuntu, CVE List). The available entries do not provid...

CVE-2005-2239

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...

CVE-2005-2239: Undefined Security Weakness

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...

OFTPD 0.3.x - User Command Buffer Overflow

OFTPD 0.3.x - User Command Buffer Overflow source: https://www.securityfocus.com/bid/14161/info oftpd is prone to a remotely exploitable buffer overflow. This may be triggered by a client through an overly long argument for the USER command. Successful exploitation may let a remote attacker execu...

OFTPD 0.3.x - User Command Buffer Overflow

source: https://www.securityfocus.com/bid/14161/info oftpd is prone to a remotely exploitable buffer overflow. This may be triggered by a client through an overly long argument for the USER command. Successful exploitation may let a remote attacker execute arbitrary code in the context of the...

Debian DSA-473-1 : oftpd - denial of service

A vulnerability was discovered in oftpd, an anonymous FTP server, whereby a remote attacker could cause the oftpd process to crash by specifying a large value in a PORT command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

GLSA-200403-08 : oftpd DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200403-08 oftpd DoS vulnerability Issuing a port command with a number higher than 255 causes the server to crash. The port command may be issued before any authentication takes place, meaning the attacker does not need to know a...

CVE-2004-0376

oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service crash via a PORT command with a large value...

CVE-2004-0376

CVE-2004-0376 affects the oftpd FTP server (versions 0.3.6 and earlier). A remote attacker can cause a denial of service by sending a PORT command with a value larger than 8 bits, crashing the oftpd process. The CVSS base score is 5.0 (Network attack, low complexity, no authentication, partial av...

CVE-2004-0376: Undefined Security Weakness

oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service crash via a PORT command with a large value...

[SECURITY] [DSA 473-1] New oftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 473-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 3rd, 2004 http://www.debian.org/security/faq -...

oftpd PORT Command Remote DoS

The remote FTP server seems to be running oftpd version 0.3.6 or older. There is a bug in this version which may allow an attacker to disable this service remotely by sending a malformed PORT command. An attacker may exploit this flaw to prevent this system from doing its job. C Tenable Network...

[ GLSA 200403-08 ] oftpd DoS vulnerability

Gentoo Linux Security Advisory GLSA 200403-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...