CVE-2006-2961

CVE-2006-2961 is a stack-based buffer overflow in CesarFTP 0.99g and earlier triggered by the MKD command. The vulnerability is exploitable remotely over the network, potentially allowing code execution and a denial-of-service via a long MKD argument. Public references and tooling exist (Metasplo...

CVE-2001-0826

The CVE-2001-0826 entry pertains to CesarFTP 0.98b and is supported by connected data showing a buffer overflow condition triggered by long arguments to commands (HELP, USER, PASS, PORT, DELE, REST, RMD, MKD). The vulnerability enables remote attackers to execute arbitrary commands on the affecte...

CVE-2004-0298

Affected software: CesarFTP 0.99e (Windows FTP server). Vulnerability: Remote attacker can cause a denial of service by sending a long RETR parameter, leading to CPU consumption. Root cause / details provided: The CVE entry specifically states a DoS via manipulated RETR parameter; exploitation de...

CVE-2001-1336

CVE-2001-1336 affects CesarFTP (0.98b and earlier), where usernames and passwords are stored in plaintext in settings.ini. The underlying issue is plaintext credential storage, enabling any account on the host to read the file and gain privileges on the CesarFTP service. Connected sources corrobo...

CVE-2003-0329

CVE-2003-0329 affects CesarFTP 0.99g, where user names and passwords are stored in plaintext in the settings.ini file. This design flaw could allow local users on the same host to gain privileges by reading credentials from that file. The CVE entry documents that plaintext credential disclosure i...

CVE-2001-1335

CVE-2001-1335 involves CesarFTP, affected in versions 0.98b and earlier. The issue is a directory traversal vulnerability that allows remote authenticated users (including anonymous) to read arbitrary files by sending a GET request whose filename contains a ...%5c (modified dot dot). The provided...