RhinoSoft Serv-U FTPd Server 3.x/4.x - 'SITE CHMOD' Remote Overflow

/ ----------------------------------------------------------------------- Servu.c - Serv-U FTPD 3.x/4.x "SITE CHMOD" Command Remote stack buffer overflow exploit Copyright C 2004 HUC All Rights Reserved. Author : lion : [email protected] : http://www.cnhonker.com Date : 2004-01-25 : 2004-01-25 v1...

[SST]ServU MDTM command remote buffero verflow adv

Serv-U Ftp Server Long Filename Stack Overflow Vunlnerablity Application: Serv-U Affected Versions: All versions prior 4.2 include 4.1.0.11 Vendor: RhinoSoft http://www.rhinosoft.com http://www.serv-u.com URL: http://www.0x557.org/release/servu.txt Vunlnerablity: An internal memory buffer may be...

RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (2)

// source: https://www.securityfocus.com/bid/9483/info RhinoSoft Serv-U FTP Server is reportedly prone to a buffer overflow. The issue exists when a 'site chmod' command is issued on a non-existant file. If an excessively long filename is specified for the command, an internal buffer will be...

RhinoSoft Serv-U FTPd Server 34 - MDTM Command Stack Overflow (2)

RhinoSoft Serv-U FTPd Server 34 - MDTM Command Stack Overflow 2 // source: https://www.securityfocus.com/bid/9483/info RhinoSoft Serv-U FTP Server is reportedly prone to a buffer overflow. The issue exists when a 'site chmod' command is issued on a non-existant file. If an excessively long filena...

Serv-U < 2.5e Multiple Vulnerabilities (OF, Path Disc)

The remote FTP server discloses the full path to its root through a CWD command for a nonexistent directory. In addition, the server may be prone to a buffer overflow that may allow a remote, authenticated attacker to launch a denial of service attack against the affected software. C Tenable...

CVE-2002-2393

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service no new connections via a series of MKD commands...

CVE-2002-0556

Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. dot dot in a URL...

CVE-2002-0556

Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. dot dot in a URL...

CVE-2002-0556

The CVE-2002-0556 entry concerns Quik-Serv HTTP server 1.1B, with a directory traversal vulnerability that allows remote attackers to read arbitrary files by supplying a .. (dot dot) in a URL. The affected component is the HTTP server (Quik-Serv) and the underlying issue is path traversal. The pr...

Quik-Serv Web Server v1.1B Arbitrary File Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Quik-Serv Web Server v1.1B Arbitrary File Disclosure Abstract: Quik-Serv Web Server is a small webserver with CGI implemented into it. The server is vulnerable to a directory transversal which allows a remote user to display arbitrary files. Exploit: ...

DoS и подключение к привелегированным портам в E-Serv &#40;ftp bounce&#41;

Не закрывается порт открытый при комманде PASV, не проверяется IP и номер порта в команде PORT...

CVE-2001-1463

The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...

CVE-2001-0054

Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

Serv-U 2.5i DoS

Hi, I think I found another DoS issue in Serv-U 2.5i: I've downloaded the "Fixed" version of Serv-U yesterday. I installed it on one of my pc's and started windirRSRCMTR.EXE to see how many resources are used when I flood it. Then I started to play around with the server: Ftp open server Connecte...

DoS против Serv-U ftp

Большое число нулевых байтов в строке приводит к краху сервера...

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

CVE-2000-0837

CVE-2000-0837 affects FTP Serv-U 2.5e, where a remote attacker can cause a denial of service by sending a large number of null bytes to the FTP service. The underlying issue is the service crashing under大量 null-byte input (as documented in public advisories and the Nessus plugin for Serv-U 2.5e D...

CVE-2000-0837

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...