993 matches found
Serv-U FTP Server < 6.1.0.4 Malformed Packet Remote DoS
Binary data 3277.prm...
CVE-2005-3334
CVE-2005-3334 concerns Flyspray, a lightweight bug-tracking web app. The vulnerability affects Flyspray 0.9.7 through 0.9.8 (devel) and is a cross-site scripting (XSS) flaw in the index.php page. An attacker can inject arbitrary web script or HTML via multiple parameters (PHPSESSID, task, string,...
CVE-2004-2532
CVE-2004-2532 affects the Serv-U FTP Server prior to version 5.1.0.0. The issue arises from a default administrator account and password that allow a local user to authenticate to the server, create a new user, log in as that user, and then issue a SITE EXEC command to execute arbitrary commands ...
CVE-2004-2533
Summary: CVE-2004-2533 affects Serv-U FTP Server (version 4.1, possibly 4.0) via the SITE CHMOD command, causing partial memory corruption and a denial of service. Related data confirms a separate but related issue (CVE-2004-2111) described as a stack-based buffer overflow in the same SITE CHMOD ...
CVE-2004-2532
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...
CVE-2004-2533
Serv-U FTP Server 4.1 possibly 4.0 allows remote attackers to cause a denial of service application crash via a SITE CHMOD command with a "\..." followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111...
Use SERV-U to do a backdoor-a vulnerability warning-the black bar safety net
serv-u default monitor 1 2 7. 0. 0. 1:4 3 9 5 8, so only in the present machine to be connected to this management port. serv-u default administrative account is LocalAdministrator,the default password is l@$ak. lk;0@P, this password in the same version is fixed, maybe in different versions is al...
In serv-u to hide your account-vulnerability warning-the black bar safety net
First confirm that the SERV-U installed and can run correctly. Here is a SERV-U extensions, must be installed in the SERV-U3. 0 version of the above! This pack contains a total 4 files webseru.dll myservu. mdb webservu. ini readme.txt wherein myservu. the mdb is used to store the account number a...
CVE-2004-2111
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-2111
Serv-U FTP Server prior to v4.2 is vulnerable to a stack-based buffer overflow in the SITE CHMOD command. A long filename can trigger arbitrary code execution by a remote attacker via FTP, as documented in CVE-2004-2111 (base CVSS v2.0 score 8.5). Multiple sources (exploit modules and OpenVAS/Ope...
CVE-2004-1992
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...
CVE-2004-1992
CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...
CVE-2001-1463
The CVE-2001-1463 vulnerability affects RhinoSoft Serv-U 3.0: the remote administration client transmits the user password in plaintext even when S/KEY One-Time Password (OTP) is enabled, enabling an attacker to sniff credentials over the network. The issue is a plaintext password exposure in the...
CVE-2004-1675
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...
CVE-2004-1675
CVE-2004-1675 affects Serv-U FTP Server 4.x–5.x. The vulnerability is triggered by the STOU command with an MS-DOS device name argument (e.g., COM1, LPT1, PRN, AUX), causing an application crash and a remote denial of service. Public references describe this as a remote DoS without user interacti...
CVE-2004-2111
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-2533
Serv-U FTP Server 4.1 possibly 4.0 allows remote attackers to cause a denial of service application crash via a SITE CHMOD command with a "\..." followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111...
CVE-2004-0330
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command...
RhinoSoft Serv-U FTP Server 5.2 - Remote Denial of Service
RhinoSoft Serv-U FTP Server 5.2 - Remote Denial of Service / denial of service in Serv-u up to 5.2 [email protected] - www.milw0rm.com Advisory: http://www.securitytracker.com/alerts/2004/Sep/1011219.html Ya its useless. / include include include include include include include define SERVERPORT...