WFTPD Pro Server 3.21 MLST Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== WFTPD Pro Server 3.21 MLST Remote Denial of Service Exploit =========================================================== /...

WFTPD Pro Server 3.21 MLST Remote Denial of Service Exploit

No description provided by source. / ----------------------------------------------------------------------- wftpd.c - WFTPD Pro Server 3.21 MLST DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : lion cnhonker net : www cnhonker com Date : 2004-08-30...

WFTPD Pro Server 3.21 - MLST Remote Denial of Service

/ ----------------------------------------------------------------------- wftpd.c - WFTPD Pro Server 3.21 MLST DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : lion cnhonker net : www cnhonker com Date : 2004-08-30...

CVE-2004-1642

WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service crash via a series of long MLIST commands...

CVE-2004-0342

CVE-2004-0342 affects WFTPD Pro Server 3.21 Release 1 when XeroxDocutech is enabled. A denial-of-service (crash) can be triggered by local users issuing MKD or XMKD commands that build an absolute path of 260 characters, which overwrites a cookie with a null character—likely due to an off-by-one ...

CVE-2004-0341

CVE-2004-0341 affects WFTPD Pro Server 3.21 Release 1 . The flaw arises because the server allocates memory for a command until a 0x0A (newline) is received, enabling a local attacker to cause a denial of service (CPU consumption) by sending a long command that never contains a newline. The NVD e...

CVE-2004-0340

CVE-2004-0340 corresponds to a stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10. The vulnerability allows local users to execute arbitrary code by sending abnormally long commands in LIST, NLST, or STAT. This is a lo...

CVE-2004-0341

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte newline is sent, which allows local users to cause a denial of service CPU consumption by continuing to send a long command that does not contain a newline...

CVE-2004-0342

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...

CVE-2004-0340

Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long 1 LIST, 2 NLST, or 3 STAT commands...

CVE-2000-0876

Vulnerability summary: WFTPD and WFTPD Pro 2.41 RC12 expose the server’s full pathname to remote attackers by issuing a "%C" command, which triggers an error message revealing the path. Affected products/components: WFTPD, WFTPD Pro 2.41 RC12. Root cause/technique: error-path disclosure in server...

CVE-2000-0875

CVE-2000-0875 affects WFTPD and WFTPD Pro 2.41 RC12. The vulnerability allows remote denial of service by sending a long string of unprintable characters. The provided documents do not specify the underlying root cause beyond this description, nor do they provide remediation steps or confirmed ex...

CVE-2001-0296

Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command...

CVE-2001-0296

CVE-2001-0296: A buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. Official descriptions (NVD) show high severity with network exploitability and complete impact on confidentiality, integrity, and availability. Connected documents ment...

CVE-2001-0296

Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command...

WFTPD Pro 3.00 R1 Buffer Overflow

When sending a command cwd followed by a long argument 500 char '.' the server crashes with: Anwendungspopup: WFTPD Service Control: WFTPD.EXE - Fehler in Anwendung: Die Anweisung in "0x2e2e2e2e" verweist auf Speicher in "0x2e2e2e2e". Der Vorgang "read" konnte nicht auf dem Speicher durchgefЭhrt...

CVE-2000-0644

CVE-2000-0644 affects WFTPD and WFTPD Pro 2.41. The vulnerability enables remote denial of service by issuing a STAT command while a LIST command is still in progress. The public sources in the connected documents confirm the impact as a partial availability degradation, but the materials do not ...

CVE-2000-0644

WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing...

CVE-2000-0645

WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...

CVE-2000-0647

CVE-2000-0647 affects WFTPD and WFTPD Pro 2.41. A remote attacker can trigger a denial of service by issuing an MLST command before logging in, potentially impacting availability. No remediation details are provided in the supplied documents.