393 matches found
Command injection
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...
PYSEC-2010-22
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...
httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply
The approxyftphandler function in modules/proxy/proxyftp.c in the modproxyftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service NULL pointer dereference and child process crash via a malformed reply to an EPSV command...
Trellian FTP 'PASV' Response Buffer Overflow Vulnerability
Trellian FTP is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1465
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long PASV response...
CVE-2010-1465
CVE-2010-1465 affects Trellian FTP Client 3.01 (including 3.1.3.1789) with a stack-based buffer overflow in PASV response processing, allowing remote code execution via a long PASV reply. Public references and PoC/exploitation exist (e.g., Exploit-DB 12152, Metasploit module trellian_client_pasv,...
Trellian FTP客户端PASV命令栈溢出漏洞
Trellian FTP是一款常用的FTP客户端。 Trellian FTP客户端在处理FTP响应时存在栈溢出漏洞。用户受骗连接到了恶意的FTP服务器并接收到了超长的PASV响应就可以触发这个溢出，导致在用户机器上执行任意代码。 Trellian FTP Client 3.01 厂商补丁： Trellian -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.trellian.com/index.html Exploit Title: Trellian FTP Client PASV BOF exploi...
Trellian FTP Client PASV Buffer Overflow
Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server that passes the vulnerable PASV...
Trellian FTP Client - PASV Buffer Overflow
Trellian FTP Client - PASV Buffer Overflow Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp...
CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow (CVE-2008-2541)
CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware, spam, phishing, P2P file sharing and prevents access to known spyware sites. All CA S...
LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'LeapWare LeapFTP v2.7.3.600 PAS...
DXMSoft XM Easy Personal FTP Server DoS
Crash if LIST command is received before PASV or POST...
FTPShell Client PASV Command Buffer Overflow Vulnerability
FTPShell Client is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ftpshell:ftpshell";...
CVE-2009-3364
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...
CVE-2009-3364
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...
httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply
The approxyftphandler function in modules/proxy/proxyftp.c in the modproxyftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service NULL pointer dereference and child process crash via a malformed reply to an EPSV command...