3 matches found
CVE-2007-1079
CVE-2007-1079 describes a stack-based buffer overflow in Rhino Software, Inc. FTP Voyager (versions 14.0.0.3 and earlier) during server response handling to a CWD command. A long response can overflow the stack when the user aborts the command, enabling a remote attacker to trigger a crash (DoS)....
CVE-2010-4154
CVE-2010-4154 affects FTP Voyager (Rhino Software) up to version 15.2.0.11 and earlier. The root cause is improper sanitization of downloaded filenames, allowing a remote FTP server to craft a filename containing directory traversal sequences (e.g., ......). This can enable writing arbitrary file...
CVE-2001-1103
CVE-2001-1103 concerns the FTP Voyager ActiveX control, prior to version 8.0. When flagged as safe for scripting (the default) or when permitted by the IObjectSafety interface, the control could allow remote attackers to execute arbitrary commands. The affected component is the FTP Voyager Active...