CVE-2007-1195

CVE-2007-1195 denotes multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 that allow remote attackers to execute arbitrary code via unspecified vectors. The description also notes possible overlap with CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728. The connected documents provide no c...

CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...

CVE-2006-6751

CVE-2006-6751 : Format-string vulnerability in XM Easy Personal FTP Server (versions 5.2.1 and 5.3.0) allows remote attackers to trigger a crash via format specifiers in the USER command or other commands, causing a denial of service and partial availability impact. No remediation details are pro...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

CVE-2006-6750

Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service application crash via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226...

XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit

No description provided by source. import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinna...

XM Ease Personal FTP Server format string vulnerability

Format string vulnerability in FTP command...

XM Easy Personal FTP Server 5.2.1 - USER Format String Denial of Service

XM Easy Personal FTP Server 5.2.1 - USER Format String Denial of Service import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url:...

XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.2.1 USER Format String DoS Exploit ================================================================== import sys,os,string import socket import time...

XM Easy Personal FTP Server 5.2.1 - 'USER' Format String Denial of Service

import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail:...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a long argument to the NLST command (potentially with -al flags). The issue requires an authenticated remote user to cause the DoS, and the description does not provide explicit exploit det...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

XM Easy Personal FTP Server DoS

Buffer overflow on oversized NLST -al FTP command argument...

XM Easy Personal FTP Server <= 5.2.1 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service !/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER "...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

!/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER " . $remoteUsername . "\r\n"; print " FTP Username: '" . $remoteUsername...

Preemptive Protection against CesarFTP and XM Easy Personal FTP Server Buffer Overflow Vulnerabilities

XM Easy Personal FTP Server fails to validate user-supplied data. Attacker can exploit this issue to execute arbitrary code on the affected server. CesarFTP contains a buffer overflow error in the handling of overly long arguments passed to the MKD command. Remote attackers can compromise a...

xmepftp.txt

!/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands with A%n,...

XM Easy Personal FTP Server 5.0.1 (Port) Remote Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================ XM Easy Personal FTP Server 5.0.1 Port Remote Overflow PoC ============================================================ !/usr/bin/perl...