200 matches found
WFTPD Server GUI 3.21 - Remote Denial of Service
source: https://www.securityfocus.com/bid/9908/info WFTPD server front end GUI has been reported to be prone to a denial of service. The issue is reported to present itself if a user who is logged into the affected service issues an FTP request with a large parameter. This will cause the server G...
WFTPD Server GUI 3.21 - Remote Denial of Service
WFTPD Server GUI 3.21 - Remote Denial of Service source: https://www.securityfocus.com/bid/9908/info WFTPD server front end GUI has been reported to be prone to a denial of service. The issue is reported to present itself if a user who is logged into the affected service issues an FTP request wit...
Critical WFTPD buffer overflow vulnerability
Name of Advisory: Critical WFTPD buffer overflow vulnerability Severity: Critical Discoverer: axl [email protected] Released: Today Vendor Notified: Today WFTPD who? what? when? Vendor quote: "WFTPD Server has been a leading FTP server for Windows since it was released in 1993. Its stability and...
Multiple WFTPD Denial of Service vulnerabilities
Name of Advisory: Multiple WFTPD Denial of Service vulnerabilities Severity: Low Discoverer: axl [email protected] Released: Today Vendor Notified: Today WFTPD who? what? when? Vendor quote: "WFTPD Server has been a leading FTP server for Windows since it was released in 1993. Its stability and...
Multiple WFTPD bugs
Buffer overflows, DoS conditions...
WFTPD Server <= 3.21 Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits =================================================== WFTPD Server pragma commentlib, "ws232.lib" include include define MAXLINE 0x1000 //define OLDCODE // Try not to uncomment this... ifdef OLDCODE static char retaddr = "\xAC\x9C\xEC\x77"; /...
WFTPD Server 3.21 - Remote Buffer Overflow
/ WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial latest version - WFTPD Server 3.10 Release 1...
WFTPD Server 3.21 - Remote Buffer Overflow
WFTPD Server 3.21 - Remote Buffer Overflow / WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial...
CVE-2000-1101
The CVE-2000-1101 entry describes a directory traversal vulnerability in Winsock FTPd (WFTPD) versions 3.00 and 2.41 when the “Restrict to home directory” option is enabled. The flaw allows local users to escape the home directory by crafting a "/../" sequence, a variant of the dot-dot attack. Th...
CVE-2001-0694
Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...
CVE-2001-0695
WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...
CVE-2001-0694
Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...
CVE-2001-0695
WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...
CVE-2001-0694
CVE-2001-0694 affects WFTPD 3.00 R5 with a directory traversal vulnerability exposed via a dot-dot sequence in the CD command. The vulnerability allows a remote attacker to view arbitrary files, impacting confidentiality and integrity (CVSS v2 base score 7.5, HIGH; network attack, low complexity,...
CVE-2001-0695
CVE-2001-0695 : WFTPD 3.00 R5 is vulnerable to a remote denial-of-service caused by repeated requests to change directory to the floppy drive (A:). The description indicates a network-accessible condition with low attack complexity and no authentication required, leading to partial availability i...
WFTPD v3.00 R5 Directory Traversal
I already posted another way, but this one might work in different situations and is not limited to win9x/ME WFTPD v3.00 R5 Directory Traversal AFFECTED SYSTEMS WFTPD v3.00 R5 DESCRIPTION Let's quote the manual on how the .lnk feature is supposed to work : "File Security Note that since version...
CVE-2001-1386
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a link file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension...
WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS
WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5, probably others DESCRIPTION 1 Directory Traversal WFTPD v3.00 R5 is vulnerable to a directory traversal bug that allows remote users to browse through any directory on the...
WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS
WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5 on Windows 95 / 98 / SE / ME is vulnerable to a directory traversal, all versions of windows are likely to be vulnerable to the buffer overflow / DoS DESCRIPTION 1 Directory...
CVE-2000-0876
Vulnerability summary: WFTPD and WFTPD Pro 2.41 RC12 expose the server’s full pathname to remote attackers by issuing a "%C" command, which triggers an error message revealing the path. Affected products/components: WFTPD, WFTPD Pro 2.41 RC12. Root cause/technique: error-path disclosure in server...