PT-2001-1559 · Microsoft · Iis

Name of the Vulnerable Software and Affected Versions: IIS versions 5.0 and earlier Description: The issue allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded. This can be exploited in the FTP service. Recommendations: For...

Alcatel ADSL modems grant unauthenticated TFTP access via Bounce Attacks

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

PT-2000-1128 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The issue allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...

CVE-1999-0035

Race condition in signal handling routine in ftpd, allowing read/write arbitrary files...

PT-1999-1104 · Microsoft · Smtp Service

Name of the Vulnerable Software and Affected Versions: Microsoft SMTP service affected versions not specified Description: The issue occurs when the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code. In response, it quickly and repeatedly attempts to...

CVE-1999-0614

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

CVE-1999-0616

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

CVE-1999-0617

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

PT-1998-1025 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: A buffer overflow issue exists in the SMTP HELO command of Sendmail, allowing a remote attacker to hide activities. Recommendations: At the moment, there is no information about a newer...

PT-1998-1059 · Ipswitch +2 · Ipswitch +2

Name of the Vulnerable Software and Affected Versions: NT mail servers including Ipswitch, Mdaemon, and Exchange affected versions not specified Description: The issue allows for denial of service to NT mail servers through a buffer overflow in the SMTP HELO command. Recommendations: At the momen...

PT-1997-1005 · Ibm +8 · Aix +10

Name of the Vulnerable Software and Affected Versions: FTP servers affected versions not specified Description: The issue allows an attacker to connect to arbitrary ports on machines other than the FTP client. This is also known as FTP bounce. Recommendations: At the moment, there is no informati...

PT-1997-1084 · Linux · Linux Tftp

Name of the Vulnerable Software and Affected Versions: Linux TFTP affected versions not specified Description: The issue allows access to files outside the restricted directory in Linux implementations of TFTP. Recommendations: At the moment, there is no information about a newer version that...

PT-1997-1042 · Sgi · Irix

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns a file descriptor leak in the getcwd function when using FTP. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

PT-1997-1094 · Gnu · Gnu Tar

Name of the Vulnerable Software and Affected Versions: GNU tar affected versions not specified Description: The issue allows an attacker to execute arbitrary commands when the GNU tar command is used in FTP sessions. Recommendations: At the moment, there is no information about a newer version th...

PT-1997-1093 · Ftp · Ftp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. Recommendations: At the moment, there is no information about a newer version th...