Command injection

Helmsman Research aka CoolUtils HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command...

CVE-2006-0355

CVE-2006-0355 affects Helmsman Research (aka CoolUtils) HomeFtp 1.1. An attacker remotely can cause a denial of service by sending a long USER command followed by a long PASS command and an NLST command. The impact is listed as partial availability (unspecified DoS). The provided documents show a...

CVE-2006-0356: Undefined Security Weakness

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...

CVE-2006-0355: Undefined Security Weakness

Helmsman Research aka CoolUtils HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command...

War FTP Daemon USER/PASS Overflow

The version of War FTP Daemon running on this host contains a buffer overflow in the code that handles the USER and PASS commands. SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2005-2850: Undefined Security Weakness

SlimFTPd 3.17 allows remote attackers to cause a denial of service crash via certain 1 USER and 2 PASS commands, possibly due to a buffer overflow or off-by-one error...

CVE-2004-2074: Undefined Security Weakness

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service crash via format string specifiers in the 1 PASS or 2 RETR commands...

Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (3)

Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 3 / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / include include include include // bind 4444 unsigned char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...

WS_FTP Server <= 5.03 (RNFR) Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ==================================================== WSFTP Server WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)

SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open Microsoft Windows 2000 Version 5.00.2195 C...

CVE-2002-0895: Undefined Security Weakness

Buffer overflow in MatuFtpServer 1.1.3.0 1.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS password command...

BlackJumboDog buffer overflow

Buffer overflow in FTP PASS command...

ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issu...

Xlight FTP Server 1.25/1.41 - 'PASS' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents itself when an attacker sends a...

Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow

Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable softwar...

CVE-2003-0766: Undefined Security Weakness

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via 1 a long FTP banner, 2 a long response to a USER command, or 3 a long response to a PASS command...

CVE-2003-0391: Undefined Security Weakness

Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the PASS command...

CVE-2002-0741: Undefined Security Weakness

psyBNC 2.3 allows remote attackers to cause a denial of service CPU consumption and resource exhaustion by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC...

Buffer overflow in MatuFtpServer

Buffer overflow in PASS command...

CVE-2000-0699: Undefined Security Weakness

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command...