httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply

The approxyftphandler function in modules/proxy/proxyftp.c in the modproxyftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service NULL pointer dereference and child process crash via a malformed reply to an EPSV command...

Trellian FTP 'PASV' Response Buffer Overflow Vulnerability

Trellian FTP is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1465

Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long PASV response...

CVE-2010-1465

CVE-2010-1465 affects Trellian FTP Client 3.01 (including 3.1.3.1789) with a stack-based buffer overflow in PASV response processing, allowing remote code execution via a long PASV reply. Public references and PoC/exploitation exist (e.g., Exploit-DB 12152, Metasploit module trellian_client_pasv,...

CVE-2010-1465: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long PASV response...

Trellian FTP客户端PASV命令栈溢出漏洞

Trellian FTP是一款常用的FTP客户端。 Trellian FTP客户端在处理FTP响应时存在栈溢出漏洞。用户受骗连接到了恶意的FTP服务器并接收到了超长的PASV响应就可以触发这个溢出，导致在用户机器上执行任意代码。 Trellian FTP Client 3.01 厂商补丁： Trellian -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.trellian.com/index.html Exploit Title: Trellian FTP Client PASV BOF exploi...

Trellian FTP Client PASV Buffer Overflow

Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server that passes the vulnerable PASV...

Trellian FTP Client - PASV Buffer Overflow

Trellian FTP Client - PASV Buffer Overflow Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp...

CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow (CVE-2008-2541)

CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware, spam, phishing, P2P file sharing and prevents access to known spyware sites. All CA S...

LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'LeapWare LeapFTP v2.7.3.600 PAS...

DXMSoft XM Easy Personal FTP Server DoS

Crash if LIST command is received before PASV or POST...

FTPShell Client PASV Command Buffer Overflow Vulnerability

FTPShell Client is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ftpshell:ftpshell";...

CVE-2009-3364

Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

CVE-2009-3364

Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

CVE-2009-3364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply

The approxyftphandler function in modules/proxy/proxyftp.c in the modproxyftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service NULL pointer dereference and child process crash via a malformed reply to an EPSV command...

CVE-2009-1675

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...

Stack overflow

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...

CVE-2009-1675

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...

CVE-2009-1675: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...