2629 matches found
Serv-U < 10.3.0.1 SFTP Authentication Bypass
According to its banner, the installed version of Serv-U is earlier than 10.3.0.1 and is, therefore, potentially affected by the following issue : - If the SFTP server has been configured to only allow public key authentication, it can be bypassed for users accounts that have no password. C Tenab...
Serv-U < 10.3.0.1 SFTP Server Authentication Bypass Vulnerability
Binary data 5712.prm...
CVE-2010-2695
Xlight FTP Server 3.x is affected by a directory traversal vulnerability in the SFTP/SSH2 virtual server. Versions 3.5.0 and 3.5.5 (and possibly others) before 3.6 allow remote authenticated users to read, overwrite, or delete arbitrary files by crafting .. sequences in commands such as ls, rm, r...
CVE-2010-2695: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. dot dot sequences in the 1 ls, 2 rm, 3 rename, and other unspecified...
XLight FTP Server 3.x SFTP Directory Traversal
According to its SSH banner, the version of XLight FTP server listening on the remote host is potentially affected by a directory traversal vulnerability in its SFTP service. A remote, authenticated attacker, exploiting this flaw, can read and modify arbitrary files on the remote host. Note that...
Xlight FTP Server 3.5.5 Directory Traversal
Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get...
Xlight FTPd Multiple Directory Traversal in SFTP
No description provided by source. Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, ...
GoodTech SSH Server SFTP Processing Buffer Overflow (CVE-2008-4726)
There exists a buffer overflow vulnerability in GoodTech SSH Server. The vulnerability is due to a boundary error while handling SFTP commands. A remote attacker can exploit this vulnerability by sending crafted SFTP commands to the target server, potentially causing arbitrary code to be injected...
XLight FTP Server SFTP Directory Traversal
Binary data 5593.prm...
Xlight FTPd Multiple Directory Traversal in SFTP
Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get...
Xlight FTPd Directory Traversal
Directory traversal in multiple SFTP commands...
Sysax Multi Server Add Administrator
Assuming the server is running as admin the overflow can actually be used to execute arbitrary code. In our example we spawn an instance of cmd.exe and create a new admin, Billyboy, with a password of woot. This has been tested with Windows XP SP2. +-------- Start Exploit --------+ import paramik...
Sysax Multi Server 5.25 Denial Of Service
Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform: Windows Type of Vulnerability: Buffer overflow --DoS Risk rating: Medium Date of...
Sysax Multi Server "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities
Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform: Windows Type of Vulnerability: Buffer overflow --DoS Risk rating: Medium Date of...
Sysax Multi Server 5.25 (SFTP Module) - Multiple Denial of Service Vulnerabilities
Sysax Multi Server 5.25 SFTP Module - Multiple Denial of Service Vulnerabilities Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform:...
Sysax Multi Server (SFTP module) Multiple Commands DoS Vulnerabilities
Exploit for windows platform in category dos / poc ====================================================================== Sysax Multi Server SFTP module Multiple Commands DoS Vulnerabilities ====================================================================== Title: Sysax Multi ServerSFTP modul...
Sysax Multi Server < 5.25 (SFTP Module) - Multiple Denial of Service Vulnerabilities
Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform: Windows Type of Vulnerability: Buffer overflow --DoS Risk rating: Medium Date of...
TurboFTP Server Directory Traversal Vulnerability
Date of Discovery: 17-Jun-2010 Credits: leinakesiatgmail.com Vendor: Turbo FTP Server Affected: Turbo FTP Server 1.20Date of Discovery: 17-Jun-2010 Credits: leinakesiatgmail.com Vendor: Turbo FTP Server Affected: Turbo FTP Server 1.20.745. Earlier versions may also be affected. Overview: 1.vendor...
Turbo FTP Server 1.20.745 Directory Traversal
Date of Discovery: 17-Jun-2010 Credits: leinakesiatgmail.com Vendor: Turbo FTP Server Affected: Turbo FTP Server 1.20.745. Earlier versions may also be affected. Overview: 1.vendor description of software ------------------------------------------------ TurboFTP Server is a high performance,...
TurboFTP Server 1.20.745 - Directory Traversal
TurboFTP Server 1.20.745 - Directory Traversal source: https://www.securityfocus.com/bid/40919/info TurboFTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to download or upload...