CVE-1999-0879

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file...

CVE-1999-0075

The CVE-1999-0075 issue affects the wu-ftpd daemon, where handling of a QUOTE PASV command after a username/password can cause a core dump. This vulnerability can lead to an information disclosure (core file containing usernames and passwords) and a forced denial of service via remote triggering ...

CVE-1999-0368

The CVE-1999-0368 issue involves buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD that can lead to remote root access (palmetto). Red Hat’s entry reiterates the same vulnerability. Nessus plugin 10318 (WU-FTPD Multiple Vulnerabilities) and 10318’s description cite the overflow as enabling...

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

FreeBSD_FTP_port_holes.txt

Subject: [email protected]: FreeBSD Security Advisory: FreeBSD-SA-99:03.ftpd REISSUED To: [email protected] [email protected] 2.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xBE7497F1 Signed: 9/15/99 11:30:30 PM...

WU-FTPD Multiple Vulnerabilities (OF, Priv Esc)

It was possible to make the remote FTP server crash by creating a huge directory structure. This is usually called the 'wu-ftpd buffer overflow' even though it affects other FTP servers. An attacker can exploit this issue to crash the FTP server, or execute arbitrary code. C Tenable Network...

CVE-1999-0911

Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories...

CVE-1999-0878

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPINGCHDIR...

wu-ftp.2.4.2.bin.ftponly.patch

Date: Sat, 27 Mar 1999 13:21:46 +0100 From: "Bluefish @ home" To: [email protected] Subject: wu-ftp 2.4.2 release VR16 /bin/ftponly as I previously reported to euro-coders, since I installed the wu-ftpd versions which fixes the beta-18 hole, the good old ftponly hack described at all pages...

wu-ftpd.worm.txt

Date: Wed, 14 Apr 1999 02:19:17 -0300 From: Stu Alchor To: [email protected] Subject: Possible WU-ftpd Worm ? I'm a system administrator of a educational domain which deals with information and technology. During the last 2 weeks, a our network have been acting very weird, with a lot of traffi...

wu-ftpd.bof+patch.txt

From: [email protected] mailto:[email protected]. edu On Behalf Of Gregory A Lundberg Sent: Tuesday, March 23, 1999 10:44 AM To: Russ Allbery Cc: [email protected]; [email protected] Subject: Re: FW: ftp exploit On 23 Mar 1999, Russ Allbery wrote: any comments? It's a...

irix.wu-ftpd.bof.txt

Date: Thu, 20 May 1999 15:00:00 -0700 From: Lance James To: [email protected] Subject: IRIX ftpd overflow Regarding the wu-ftpd buffer overflow, it seems vulnerable in IRIX as well. While testing it, it seemed to have core dumped and dumped the passwd file in there as well, but it's only core...

WU-FTPD QUOTE PASV Forced Core Dump Information Disclosure

The remote FTP server fails to handle QUOTE PASV requests for logged in users. An attacker can send a specially crafted requests to cause the service to die and dump core. The core file contains the usernames and passwords of all users. C Tenable Network Security, Inc. include"compat.inc";...

WU-FTPD SITE EXEC Arbitrary Local Command Execution

The remote host is running a version of WU-FTPD that is affected by a command execution vulnerability. It is possible to execute arbitrary command son the remote host using the 'site exec' FTP problem. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10090;...

[SECURITY] Corrected advisory on wu-ftpd-academ buffer overflow

The previous advisory concerning wu-ftpd-academ contained an error: the md5sum given for wu-ftpd-academ2.4.2.16-12.2i386.deb was incorrect. The correct md5sum is b851adb345917a6f92e8b03f8cc97ff2. I apologize for the confusion this has caused. The complete, updated, text of the advisory follows...

[SECURITY] Corrected advisory on wu-ftpd-academ buffer overflow

The previous advisory concerning wu-ftpd-academ contained an error: the md5sum given for wu-ftpd-academ2.4.2.16-12.2i386.deb was incorrect. The correct md5sum is b851adb345917a6f92e8b03f8cc97ff2. I apologize for the confusion this has caused. The complete, updated, text of the advisory follows...

[SECURITY] New version of wu-ftpd fixes buffer overflow

Subject: SECURITY New versions of wu-ftpd-academ fixes buffer overflow We have received reports that the wu-ftpd-academ package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise...

[SECURITY] New version of wu-ftpd fixes buffer overflow

Subject: SECURITY New versions of wu-ftpd-academ fixes buffer overflow We have received reports that the wu-ftpd-academ package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise...

PT-1999-1056 · Proftpd +1 · Proftpd +1

Name of the Vulnerable Software and Affected Versions: wu-ftpd affected versions not specified ProFTPD affected versions not specified Description: The issue concerns buffer overflows in wuarchive ftpd and ProFTPD, which can lead to remote root access. Recommendations: For wu-ftpd, at the moment,...

WU-FTPD 2.4.2 SCO Open Server 5.0.5 ProFTPd 1.2 pre1 - realpath Remote Buffer Overflow (2)

WU-FTPD 2.4.2 SCO Open Server 5.0.5 ProFTPd 1.2 pre1 - realpath Remote Buffer Overflow 2 / source: https://www.securityfocus.com/bid/113/info There is a vulnerability in ProFTPD versions 1.2.0pre1 and earlier and in wu-ftpd 2.4.2 beta 18 VR9 and earlier. This vulnerability is a buffer overflow...