NetSarang Xftp 3.0 PWD响应栈溢出漏洞

BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...

Xftp client 3.0 - 'PWD' Remote Overflow

Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link: http://www.netsarang.com/download/downxft3.html Version: Xftp 3.0 build 0238 Tested on: Windows XP SP3 Usage: ./xftpexploit The BOF occurs when sending an overly long PWD response. EDB Testing Notes...

Format string

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

stftp <= 1.10 (PWD Response) Remote Stack Overflow PoC

Exploit for linux platform in category dos / poc ====================================================== stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:...

stftp 1.10 - PWD Response Remote Stack Overflow (PoC)

stftp 1.10 - PWD Response Remote Stack Overflow PoC !/usr/bin/python stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:80 + " ..." return ret def initself...

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

CVE-2008-6258

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

Graugon Forum 1 - id Command Injection SQL Injection

Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Sql injection

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter...

CVE-2008-4321

Buffer overflow in FlashGet formerly JetCar FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

This host is running FlashGet, which is prone to Remote Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodflashgetftppwdbofvuln900203.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability. Authors: Veerendra GG Copyrigh...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

FlashGet is prone to a remote buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FlashGet 1.9.0.1012 (FTP PWD Response) BOF Exploit (safeseh)

No description provided by source. !/usr/bin/perl ksOSe 08/17/2008 bypass safeseh using flash9f.ocx. use warnings; use strict; use IO::Socket; win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com my $shellcode =...

FlashGet 1.9.0.1012 - FTP PWD Response SEH Stack Overflow

FlashGet 1.9.0.1012 - FTP PWD Response SEH Stack Overflow !/usr/bin/perl FlashGet 1.9.0.1012 FTP PWD Response SEH STACK Overflow Exploit Coded By SkOd, skod.uk at gmail dot com Tested over Windows XP sp1 Hebrew link your victim to - ftp://localhost/somefile.TORRENT - over internet explorer. PoC b...

FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow

!/usr/bin/perl FlashGet 1.9.0.1012 FTP PWD Response SEH STACK Overflow Exploit Coded By SkOd, skod.uk at gmail dot com Tested over Windows XP sp1 Hebrew link your victim to - ftp://localhost/somefile.TORRENT - over internet explorer. PoC by Krystian Kloskowski h07 http://milw0rm.com/exploits/6240...

FlashGet FTP PWD响应栈溢出漏洞

BUGTRAQ ID: 30685 FlashGet是一款多线程下载程序。 FlashGet没有正确地处理FTP PWD命令的响应数据，如果用户受骗连接到了恶意的FTP服务器并接收到了超长的响应的话，就可以触发栈溢出，导致在用户系统上执行任意指令。 Amazesoft FlashGet 1.9.0.1012 Amazesoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.amazesoft.com/ http://www.sebug.net/exploit/4424/...

FlashGet 1.9.0.1012 (FTP PWD Response) SEH STACK Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= FlashGet 1.9.0.1012 FTP PWD Response SEH STACK Overflow Exploit ================================================================= !/usr/bin/perl FlashGet 1.9.0.1012 FTP PWD...

FlashGet 1.9 (FTP PWD Response) Remote BOF Exploit PoC 0day

No description provided by source. !/usr/bin/python FlashGet 1.9 FTP PWD Response 0day Remote Buffer Overflow PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Testen on: FlashGet 1.9 / XP SP2 Polish Product URL: http://www.flashget.com/en/download.htm?uid=undefined Details:...