1144 matches found
RhinoSoft Serv-U FTP Server 'rnto'命令目录遍历漏洞
BUGTRAQ ID: 31563 CNCAN ID：CNCAN-2008100610 RhinoSoft Serv-U FTP Server是一款流行的FTP服务程序。 Serv-U FTP Server不正确处理'rnto'命令，远程攻击者可以利用漏洞以应用程序权限查看系统文件内容。 'rnto'命令不正确过滤输入，构建包含"../"字符的字符串作为参数，可绕过目录限制，以应用程序权限查看系统文件内容。 RhinoSoft Serv-U 7.2.1 目前没有解决方案提供： http://www.serv-u.com/ http://www.sebug.net/exploit/4803...
CVE-2008-4501: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...
Serv-U < 7.3.0.1 Multiple Remote Vulnerabilities
Binary data 4699.prm...
Serv-U <= 7.3 Remote FTP File Replacement Vulnerability (auth)
Exploit for unknown platform in category remote exploits ============================================================== Serv-U = 7.3 Remote FTP File Replacement Vulnerability auth ============================================================== Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must...
Serv-U <= 7.3 Remote FTP File Replacement Vulnerability (auth)
No description provided by source. Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory...
Serv-U <= 7.3 (stou con:1) Denial of Service Vulnerability (auth)
Exploit for unknown platform in category dos / poc ================================================================= Serv-U = 7.3 stou con:1 Denial of Service Vulnerability auth ================================================================= Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have...
servu72-upload.txt
Serv-U 7.2.0.1 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists, ready for destination name. rnto...
Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement
Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists, ready for destination name...
Serv-U 7.2.0.1 (stou con:1) Denial of Service Vulnerability (auth)
No description provided by source. Serv-U 7.2.0.1 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS...
RhinoSoft Serv-U FTP Server 7.2.0.1 - rnto Directory Traversal
RhinoSoft Serv-U FTP Server 7.2.0.1 - rnto Directory Traversal source: https://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows ...
Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement
Serv-U FTP Server 7.3 - Authenticated Remote FTP File Replacement Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr...
RhinoSoft Serv-U FTP Server 7.3 - (Authenticated) stou con:1 Denial of Service
RhinoSoft Serv-U FTP Server 7.3 - Authenticated stou con:1 Denial of Service Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1...
Serv-U <= 7.3 (stou con:1) Denial of Service Vulnerability (auth)
No description provided by source. Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now...
servu72-dos.txt
Serv-U 7.2.0.1 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS'ed...
RhinoSoft Serv-U FTP Server 7.3 - (Authenticated) 'stou con:1' Denial of Service
Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS'ed milw0rm.com 2008-10-03...
RhinoSoft Serv-U FTP Server 7.2.0.1 - 'rnto' Directory Traversal
source: https://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to locations outside of th...
Serv-U 7.2.0.1 Remote FTP File Replacement Vulnerability (auth)
No description provided by source. Serv-U 7.2.0.1 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists,...
Serv-u to establish a secure and hidden accounts-vulnerability warning-the black bar safety net
When your meat machine and installed SERV-U, you can use the following method to establish a hidden account First confirm that the SERV-U installed and can run correctly. Here is a SERV-U extensions, must be installed in the SERV-U3. 0 version of the above! This pack contains a total 4 files...
RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability
RhinoSoft Serv-U SFTP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a denial of service daemon crash via an SSH session with SFTP commands for directory creation and logging...