CVE-1999-0838: Undefined Security Weakness

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

CVE-2000-0176

The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0176: Undefined Security Weakness

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0129

The vulnerability CVE-2000-0129 affects the Serv-U FTP server. A buffer overflow in SHGetPathFromIDList can be triggered by a LIST command on a malformed .lnk file, leading to a denial of service. Exploitation details are not provided in the documents. PT-2000-1115 notes affected versions are not...

CVE-2000-0129

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...

CVE-2000-0129: Undefined Security Weakness

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...

CVE-2000-0129

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...

serv-u.25b.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local / Remote D.o.S Attack in Serv-U FTP-Server v2.5b for Win9x/WinNT Vulnerability USSR Advisory Code: USSR-2000032 Release Date: February 04, 2000 Systems Affected: Serv-U FTP-Server v2.5b and maybe other versions. Windows 95 Windows 98 Windows Nt...

Cat Soft Serv-U FTP Server 2.5/a/b (Windows 95/98/2000/NT 4.0) - Shortcut

Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcut Vulnerability source: https://www.securityfocus.com/bid/970/info...

Cat Soft Serv-U FTP Server 2.5ab (Windows 95982000NT 4.0) - Shortcut

Cat Soft Serv-U FTP Server 2.5ab Windows 95982000NT 4.0 - Shortcut Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcu...

serv-u.2.5.txt

Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability PROBLEM: UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a, The buffer overflow is caused by a bad Formed SITE command For the source / binary of this remote / local D.O.S Go to: http://www.ussrback.com/servu/ Vendor...

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user...

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service

source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user, including an 'anonymous' user...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0219

CVE-1999-0219 is a buffer overflow in FTP Serv-U 2.5 that allows a remote authenticated user to cause a denial of service (crash) by sending a long CWD or LS command. Multiple sources in the connected documents corroborate the DoS via command handling overflow; the condition is triggered by exces...

CVE-1999-0219: Undefined Security Weakness

Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service crash via a long 1 CWD or 2 LS list command...

ftpd_win9xNT_exploit.txt

Subject: Exploit: Serv-U Ver2.5 FTPd Win9x/NT To: [email protected] Hi, "Version 2.5a Released 5 May 1999 Fixed bug introduced in v2.5 causing crashes with long paths in FTP commands." Upgrade is available at http://www.ftpserv-u.com/. Original thread:...