Serv-U 2.5e Null Byte Saturation DoS

It is possible to crash the remote FTP service by sending it a large number of null bytes. An attacker could exploit this flaw to deny access to the FTP server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10488; scriptversion"1.35"; scriptcvsdate"Date: 2018/11/15...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0838

Concrete details from connected documents show that Serv-U FTP before version 2.5e is affected by multiple issues: a buffer overflow in the SERVER when processing the SITE command can cause a denial of service, and a path disclosure via CWD commands for nonexistent directories can reveal the root...

CVE-2000-0176

The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0129

The vulnerability CVE-2000-0129 affects the Serv-U FTP server. A buffer overflow in SHGetPathFromIDList can be triggered by a LIST command on a malformed .lnk file, leading to a denial of service. Exploitation details are not provided in the documents. PT-2000-1115 notes affected versions are not...

CVE-2000-0129

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...

CVE-2000-0129

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...

serv-u.25b.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local / Remote D.o.S Attack in Serv-U FTP-Server v2.5b for Win9x/WinNT Vulnerability USSR Advisory Code: USSR-2000032 Release Date: February 04, 2000 Systems Affected: Serv-U FTP-Server v2.5b and maybe other versions. Windows 95 Windows 98 Windows Nt...

Cat Soft Serv-U FTP Server 2.5/a/b (Windows 95/98/2000/NT 4.0) - Shortcut

Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcut Vulnerability source: https://www.securityfocus.com/bid/970/info...

Cat Soft Serv-U FTP Server 2.5ab (Windows 95982000NT 4.0) - Shortcut

Cat Soft Serv-U FTP Server 2.5ab Windows 95982000NT 4.0 - Shortcut Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcu...

serv-u.2.5.txt

Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability PROBLEM: UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a, The buffer overflow is caused by a bad Formed SITE command For the source / binary of this remote / local D.O.S Go to: http://www.ussrback.com/servu/ Vendor...

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user...

Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service

source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user, including an 'anonymous' user...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0219

CVE-1999-0219 is a buffer overflow in FTP Serv-U 2.5 that allows a remote authenticated user to cause a denial of service (crash) by sending a long CWD or LS command. Multiple sources in the connected documents corroborate the DoS via command handling overflow; the condition is triggered by exces...

ftpd_win9xNT_exploit.txt

Subject: Exploit: Serv-U Ver2.5 FTPd Win9x/NT To: [email protected] Hi, "Version 2.5a Released 5 May 1999 Fixed bug introduced in v2.5 causing crashes with long paths in FTP commands." Upgrade is available at http://www.ftpserv-u.com/. Original thread:...

serve-U.DoS.txt

Date: Thu, 11 Feb 1999 21:36:13 -0600 From: Ryan Sweat To: [email protected] Subject: Buffer overflow in Serve-U I have successfully reprocuded this overflow in the newest Version of Serve-U. It totally crashes the ftp program, and also causes stack fault module in tcp/ip stack rendering the...

ftp.serv-u.2.5.bof.txt

Date: Mon, 3 May 1999 06:16:38 +0200 From: Arne Vidstrom To: [email protected] Subject: Buffer overflows in FTP Serv-U 2.5 Hi, It looks like there are some buffer overflows in FTP Serv-U 2.5 the most recent version and I guess they are present in the versions before too, but I...