Medieval Total War 1.0/1.1 - nickname Denial of Service

source: https://www.securityfocus.com/bid/8787/info It has been reported that Medieval Total War may be prone to a denial of service vulnerability. The issue is caused when an attacker sends a malformed value for nickname consisting of 0 Unicode characters to the server during the initial...

Liquid War 5.4.5/5.5.6 - HOME Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/8629/info Liquid War has been reported prone to a buffer overflow condition when handling HOME environment variables of excessive length. The issue presents itself, due to a lack of sufficient boundary checks performed on data contained in the HOME...

WarFTPd USER/PASS Command Remote Overflow

The version of War FTP Daemon running on this host contains a buffer overflow in the code that handles the USER and PASS commands. A potential intruder could use this vulnerability to crash the server, as well as run arbitrary commands on the system. This script was written by Erik Tayler See the...

WarFTPd CWD/MKD Command Overflow

The version of the War FTP Daemon running on this host is vulnerable to a buffer overflow attack. This is due to improper bounds checking within the code that handles both the CWD and MKD commands. By exploiting this vulnerability, it is possible to crash the server. This script was written by Er...

CVE-2002-0125

Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as 1 Super Methane Brothers, 2 Star War, 3 Kwirk, 4 Clankanoid, and others, via a long HOME environment variable...

CVE-2001-0295

Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir ./../.." command...

CVE-2001-0295

CVE-2001-0295 refers to a directory traversal vulnerability in War FTP Daemon (WarFTPd) around version 1.67.04. The vulnerability allows remote attackers to list directory contents and possibly read files by issuing a specially crafted directory command (dir *./../..), potentially exposing files ...

CVE-2001-0295

Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir ./../.." command...

jarle aase war ftpd 1.67 b04 - Directory Traversal

source: https://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclose an arbitrary directory. This vulnerability could...

CVE-2000-0044

The CVE-2000-0044 entry concerns War FTP Daemon versions 1.70 and 1.67b2, where macros allow local or remote attackers to read arbitrary files or execute commands. The connected records confirm the affected product/version and the underlying impact, but they do not provide a concrete remediation ...

CVE-2000-0131

CVE-2000-0131: War FTP Daemon 1.6x is vulnerable to a buffer overflow in the CWD/MKD command handling due to improper bounds checking. This can enable a remote attacker to crash the server (DoS) via long MKD/CWD commands. Documented in several sources (OpenVAS/Nessus entries), with CVSSv2 base sc...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

CVE-2000-0044

Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands...

CVE-1999-1003

War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections...

CVE-1999-1003

CVE-1999-1003 affects War FTP Daemon 1.70. The vulnerability allows remote attackers to cause a denial of service by flooding the server with connections. The connected PT-1999-1521 entry provides concrete remediation guidance: for War FTP Daemon 1.70, consider restricting the number of concurren...

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service // source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible ...

Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service

// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

CVE-2000-0044

Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands...

warftp.dos.txt

Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in War FTP Daemon 1.70 the buffer overflow is caused by a Multiples connections at the same time over 60 in the ftp server , and some characters in the login name. There is not much t...