3 matches found
CVE-2001-0781
CVE-2001-0781 affects SpoonFTP 1.0.0.12, where a buffer overflow in handling long arguments to CWD or LIST can allow remote code execution. The root cause is a vulnerability in argument processing that overflows a memory buffer. Exploitation details are not provided in the available documents; no...
CVE-2001-0963
SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...
CVE-2002-0139
Pi-Soft SpoonFTP 1.1 and earlier is affected by an FTP bounce vulnerability where remote attackers can redirect traffic to other sites using the PORT command. The issue arises in how the PORT command allows specifying an arbitrary destination, enabling data connections to be opened to arbitrary h...