393 matches found
Design/Logic Flaw
IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port...
CVE-2019-10055
CVE-2019-10055 affects Suricata 4.1.3. The issue is in ftp_pasv_response where the lengths of part1 and part2 are not checked, causing a crash in the ftp/mod.rs component. This yields a potential denial-of-service condition. A fixed version is available in Suricata 4.1.4 (and later); upgrade to m...
CVE-2018-12113
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response...
CVE-2018-12113
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response...
Buffer overflow
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response...
CVE-2018-12113
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response...
Denial of Service Vulnerability in Quick Easy FTP Server
Quick Easy FTP Server is a small FTP server. A denial of service attack vulnerability exists in Quick Easy FTP Server version V4.0.0, which can be exploited to cause the program to crash when no PASV command is entered...
Trellian FTP Client PASV Remote Buffer Overflow (CVE-2010-1465)
A code execution vulnerability exists in Trellian FTP client 3.01 , including 3.1.3.1789. The vulnerability is due to a stack buffer overflow when processing PASV FTP responses. Remote attackers can exploit this vulnerability by sending long PASV response and execute arbitrary code...
Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912)
Full details: http://www.securitygalore.com/site3/safari-pasv Thanks, -Amit Klein http://www.securitygalore.com/...
WinFTP Server NLST Command Denial of Service (CVE-2008-5666)
A denial of service vulnerability has been reported in WinFTP Server. The vulnerability is due to WinFTP Server failure to handle a NLST command when in PASV mode. A remote attacker can exploit this vulnerability by sending a specially crafted connection request to the vulnerable server...
KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TC...
Cisco PIX Firewall 5.2 PASV Mode FTP Internal Address Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By sending a number of requests to...
Trellian FTP Client 3.01 PASV Remote Buffer Overflow
No description provided by source. $Id: trellianclientpasv.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
FTPGetter 3.58.0.21 - Buffer Overflow (PASV) Exploit
No description provided by source. !/usr/bin/python Exploit Title: FTPGetter v3.58.0.21 Buffer Overflow PASV Exploit Date: 02/03/2011 Author: modpr0be Software Link: http://www.ftpgetter.com/ftpgettersetup.exe Vulnerable version: = 3.58.0.21 Tested on: Windows XP SP3 VMware Player 3.1.3...
LiteServe 2.81 PASV Command Denial of Service
No description provided by source. !/usr/bin/python Title: LiteServe 2.81 PASV Command DoS Author: Craig Freyman @cd1zz Date: Bug found July 25, 2011 - Vendor approved release August 7, 2011 Tested on Windows XP SP3 and Server 2003 SP2 Software: http://www.cmfperception.com/liteserve.html Notes: ...
Trellian FTP Client PASV BOF exploit
No description provided by source. Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server...
Google Chrome 1.0.154.36 - FTP Client PASV Port Scan Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33112/info Google Chrome is prone to an information-disclosure vulnerability because it fails to adequately validate server-issued instructions while in PASV passive mode. Attackers can exploit this issue to port-scan...
CVE-2014-4643
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...
Scientific Linux Security Update : kdelibs on SL5.x, SL4.x i386/x86_64
Two cross-site-scripting flaws were found in the way Konqueror processes certain HTML content. This could result in a malicious attacker presenting misleading content to an unsuspecting user. CVE-2007-0242, CVE-2007-0537 A flaw was found in KDE JavaScript implementation. A web page containing...
Solar FTP Server 2.1.2 - PASV Buffer Overflow (Metasploit)
Solar FTP Server 2.1.2 - PASV Buffer Overflow Metasploit Exploit Title: Solarftp v2.1.2 PASV buffer overflow Date: Aug 17, 2011 Author: qnix Software Link: http://solarftp.com/files/solarftps-setup.exe Version: 2.1.2 Tested on: Windows XP Universal Detailed info: http://0x80.org/blog/?p=545 requi...