Vulnerabilities in EServ 2.97

There are a couple of vulnerabilities in EServ 2.97. Vulnerability 1 The FTP server doesn't close the sockets that are allocated from using the PASV command. After all ports from 1024 to 5000 are listening after running a lot of PASV commands in a row no users can use passive mode anymore until t...

DoS и подключение к привелегированным портам в E-Serv (ftp bounce)

Не закрывается порт открытый при комманде PASV, не проверяется IP и номер порта в команде PORT...

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

CVE-2001-0827

The Cerberus FTP server (versions 1.0 through 1.5 ) is vulnerable to a denial of service (DoS) attack. A remote attacker can cause the server to crash by sending a large volume of "PASV" requests. This issue is categorized as Uncontrolled Resource Consumption (CWE-400 ). To mitigate the risk, it ...

PT-2001-1995 · Cerberus · Cerberus Ftp Server

Name of the Vulnerable Software and Affected Versions: Cerberus FTP server versions 1.0 through 1.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a large number of "PASV" requests. Recommendations: For Cerberus FTP server versions 1....

CVE-2001-0827: Uncontrolled Resource Consumption

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

CVE-2001-0702

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long 1 username, 2 password, or 3 PASV command...

CVE-2001-0187: Undefined Security Weakness

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

CVE-2000-1027

Cisco Secure PIX Firewall 5.22 allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established...

CVE-2000-1027: Undefined Security Weakness

Cisco Secure PIX Firewall 5.22 allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established...

Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure

source: https://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By sending a number of requests to enter passive ftp mode PASV during ...

CVE-2000-0150: Undefined Security Weakness

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt...

fw1-ftp.txt

FireWall-1 FTP Server Vulnerability Background Paper 1, data protect AG John McDonald Thomas Lopatic References ---------- Please reference the recent vuln-dev posting by Mikael Olsson entitled, "Breaking through FTP ALGs -- is it possible?" At the time of this writing, it was not yet archived on...

CVE-1999-0076

CVE-1999-0076 describes a buffer overflow in wu-ftp triggered by the PASV command, causing a core dump. The connected documents corroborate the description but do not provide explicit affected versions or a fixed patch. The vulnerability affects wu-ftp and results in process termination (core dum...

CVE-1999-0076

Buffer overflow in wu-ftp from PASV command causes a core dump...

CVE-1999-0076: Undefined Security Weakness

Buffer overflow in wu-ftp from PASV command causes a core dump...

CVE-1999-0079

CVE-1999-0079 describes a remote denial-of-service condition in FTP where an attacker can exhaust server ports by issuing multiple PASV commands. The vulnerability is documented across NVD/Red Hat/Nessus references with the core impact being port/descriptor exhaustion leading to service disruptio...