LeapWare LeapFTP 2.7.x - Remote Buffer Overflow

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow / ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by drG4njubas \ DWC Group ---------------------------------------------------- ,---------------------------------------------------- ;This exploit...

LeapFTP 2.7.x Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================ LeapFTP 2.7.x Remote Buffer Overflow Exploit ============================================ / ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by...

[LeapFTP] "PASV" Reply Buffer Overflow Vulnerability

---------------------------------------------------------------------- SUMMARY : LeapFTP "PASV" Reply Buffer Overflow Vulnerability PRODUCT : LeapFTP VERSIONS : 2.7.3.600 VENDOR : LeapWare http://www.leapware.com/ SEVERITY : Critical. Code Execution. DISCOVERED BY : nesumin AUTHOR : :: Operash ::...

LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

This module exploits a buffer overflow in the LeapWare LeapFTP v2.7.3.600 client that is triggered through an excessively long PASV reply command. This module was ported from the original exploit by drG4njubas with minor improvements. Module Options msf use exploit/windows/ftp/leapftp/pasvreply m...

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

CVE-2002-0768: Undefined Security Weakness

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

CVE-2002-1943

SafeTP 1.46, when network address translation NAT is being used, leaks the internal IP address of the FTP server in a response to a passive mode PASV file transfer request...

IPSwitch, Inc. WS_FTP Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: IPSwitch, Inc. WSFTP Server Versions: v3.13 dated 2002.08.07, possibly others. Severity: Medium-Hot Author: low halo [email protected] Date: October 25th, 2002 Revision: 1.0 Overview WSFTP v3.13 by IPSwitch, Inc., is vulnerable to the...

CVE-2002-1063

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

CVE-2002-1063

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

CVE-2002-1063: Undefined Security Weakness

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

CVE-2002-0600

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive PASV mode request...

CVE-2002-0600: Undefined Security Weakness

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive PASV mode request...

Buffer overflow in lukemftp

Buffer overflow on preparing PASV command...

CVE-2002-0221

Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...

CVE-2002-0221

CVE-2002-0221 affects Etype Eserv 2.97. The issue is caused by remote attackers sending a large number of PASV commands, exhausting ports 1024–5000 and preventing the server from accepting valid PASV connections, resulting in a denial of service. Exploit details and mitigation are not provided in...

CVE-2002-0221

Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...

CVE-2002-0221: Undefined Security Weakness

Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...

CVE-1999-1148: Undefined Security Weakness

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via many passive PASV connections at the same time...