3423 matches found
Use SERV-U to do a backdoor-a vulnerability warning-the black bar safety net
serv-u default monitor 1 2 7. 0. 0. 1:4 3 9 5 8, so only in the present machine to be connected to this management port. serv-u default administrative account is LocalAdministrator,the default password is l@$ak. lk;0@P, this password in the same version is fixed, maybe in different versions is al...
In serv-u to hide your account-vulnerability warning-the black bar safety net
First confirm that the SERV-U installed and can run correctly. Here is a SERV-U extensions, must be installed in the SERV-U3. 0 version of the above! This pack contains a total 4 files webseru.dll myservu. mdb webservu. ini readme.txt wherein myservu. the mdb is used to store the account number a...
CVE-2005-2893: Undefined Security Weakness
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username u parameter, which is directly injected into a file that is later executed upon login...
CVE-2005-2895: Undefined Security Weakness
setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 a null byte in the u parameter, which reveals the path in an error message...
CVE-2005-2892: Undefined Security Weakness
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" trailing null byte in the u parameter...
CVE-2004-2111
Serv-U FTP Server prior to v4.2 is vulnerable to a stack-based buffer overflow in the SITE CHMOD command. A long filename can trigger arbitrary code execution by a remote attacker via FTP, as documented in CVE-2004-2111 (base CVSS v2.0 score 8.5). Multiple sources (exploit modules and OpenVAS/Ope...
CVE-2004-2111
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-2111: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-1992
CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...
CVE-2004-1992
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...
CVE-2004-1992: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...
CVE-2001-1463
The CVE-2001-1463 vulnerability affects RhinoSoft Serv-U 3.0: the remote administration client transmits the user password in plaintext even when S/KEY One-Time Password (OTP) is enabled, enabling an attacker to sniff credentials over the network. The issue is a plaintext password exposure in the...
CVE-2001-1463: Undefined Security Weakness
The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...
CVE-2004-1675
CVE-2004-1675 affects Serv-U FTP Server 4.x–5.x. The vulnerability is triggered by the STOU command with an MS-DOS device name argument (e.g., COM1, LPT1, PRN, AUX), causing an application crash and a remote denial of service. Public references describe this as a remote DoS without user interacti...
CVE-2004-1675
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...
CVE-2004-1675: Improper Input Validation
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...
CVE-2004-2533
Serv-U FTP Server 4.1 possibly 4.0 allows remote attackers to cause a denial of service application crash via a SITE CHMOD command with a "\..." followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111...
CVE-2004-2111
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...
Serv-U FTP Server Buffer Overflow
This module exploits a stack buffer overflow in the site chmod command in versions of Serv-U FTP Server prior to 4.2. You must have valid credentials to trigger this vulnerability. Exploitation also leaves the service in a non-functional state. Module Options msf use exploit/windows/ftp/servu/chm...