ftp server vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server prior to 5.0.5.0 allow remote malicious users to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP ser...

Cerberusftp Ftp Server Cerberusftp Ftp Server 1.0 Cerberusftp Ftp Server 1.01 Cerberusftp Ftp Server 1.1 Cerberusftp Ftp Server 1.2 Cerberusftp Ftp Server 1.02 Cerberusftp Ftp Server 1.03 Cerberusftp Ftp Server 1.5 Cerberusftp Ftp Server 1.05 Cerberusftp Ftp Server 1.6 Cerberusftp Ftp Server 1.7 Cerberusftp Ftp Server 1.22

The default configuration of Cerberus FTP Server prior to 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote malicious users to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data.

Cerberusftp Ftp Server Cerberusftp Ftp Server 1.0 Cerberusftp Ftp Server 1.01 Cerberusftp Ftp Server 1.1 Cerberusftp Ftp Server 1.2 Cerberusftp Ftp Server 1.02 Cerberusftp Ftp Server 1.03 Cerberusftp Ftp Server 1.5 Cerberusftp Ftp Server 1.05 Cerberusftp Ftp Server 1.6 Cerberusftp Ftp Server 1.7 Cerberusftp Ftp Server 1.22

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server prior to 5.0.6.0 allow (1) remote malicious users to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, a...

Cerberusftp Ftp Server Cerberusftp Ftp Server 1.0 Cerberusftp Ftp Server 1.01 Cerberusftp Ftp Server 1.1 Cerberusftp Ftp Server 1.2 Cerberusftp Ftp Server 1.02 Cerberusftp Ftp Server 1.03 Cerberusftp Ftp Server 1.5 Cerberusftp Ftp Server 1.05 Cerberusftp Ftp Server 1.6 Cerberusftp Ftp Server 1.7 Cerberusftp Ftp Server 1.22

Cerberus FTP Server prior to 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.

Cerberusftp Ftp Server Cerberusftp Ftp Server 1.0 Cerberusftp Ftp Server 1.01 Cerberusftp Ftp Server 1.1 Cerberusftp Ftp Server 1.2 Cerberusftp Ftp Server 1.02 Cerberusftp Ftp Server 1.03 Cerberusftp Ftp Server 1.5 Cerberusftp Ftp Server 1.05 Cerberusftp Ftp Server 1.6 Cerberusftp Ftp Server 1.7 Cerberusftp Ftp Server 1.22

ArGoSoft FTP 1.4.2.4 and previous versions does not limit the number of times that a bad password can be entered, which makes it easier for remote malicious users to guess passwords via a brute force attack.

Argosoft Ftp Server Argosoft Ftp Server 1.4.1.1 Argosoft Ftp Server 1.4.1.2 Argosoft Ftp Server 1.4.1.3 Argosoft Ftp Server 1.4.1.4 Argosoft Ftp Server 1.4.1.5 Argosoft Ftp Server 1.4.1.6 Argosoft Ftp Server 1.4.1.7 Argosoft Ftp Server 1.4.1.8 Argosoft Ftp Server 1.4.1.9 Argosoft Ftp Server 1.4.2 Argosoft Ftp Server 1.4.2.1

Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote malicious users to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer.

Argosoft Ftp Server 1.4.1.1 Argosoft Ftp Server 1.4.1.2 Argosoft Ftp Server 1.4.1.3 Argosoft Ftp Server 1.4.1.4 Argosoft Ftp Server 1.4.1.5 Argosoft Ftp Server 1.4.1.6 Argosoft Ftp Server 1.4.1.7 Argosoft Ftp Server 1.4.1.8 Argosoft Ftp Server 1.4.1.9 Argosoft Ftp Server 1.4.2 Argosoft Ftp Server 1.4.2.1 Argosoft Ftp Server 1.4.2.2

Xlight 1.52, with log to screen enabled, allows remote malicious users to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buf...

Xlight Ftp Server Xlight Ftp Server 1.25 Xlight Ftp Server Xlight Ftp Server 1.41 Xlight Ftp Server Xlight Ftp Server 1.45 Xlight Ftp Server Xlight Ftp Server 1.52

1 EDB exploit

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.

Southrivertech Titan Ftp Server Southrivertech Titan Ftp Server 1.0.17 Southrivertech Titan Ftp Server 1.0.18 Southrivertech Titan Ftp Server 1.0.19 Southrivertech Titan Ftp Server 1.0.20 Southrivertech Titan Ftp Server 1.0.21 Southrivertech Titan Ftp Server 1.0.22 Southrivertech Titan Ftp Server 1.0.23 Southrivertech Titan Ftp Server 1.0.24 Southrivertech Titan Ftp Server 1.0.25 Southrivertech Titan Ftp Server 1.0.26 Southrivertech Titan Ftp Server 1.0.27

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.

Southrivertech Titan Ftp Server Southrivertech Titan Ftp Server 1.0.17 Southrivertech Titan Ftp Server 1.0.18 Southrivertech Titan Ftp Server 1.0.19 Southrivertech Titan Ftp Server 1.0.20 Southrivertech Titan Ftp Server 1.0.21 Southrivertech Titan Ftp Server 1.0.22 Southrivertech Titan Ftp Server 1.0.23 Southrivertech Titan Ftp Server 1.0.24 Southrivertech Titan Ftp Server 1.0.25 Southrivertech Titan Ftp Server 1.0.26 Southrivertech Titan Ftp Server 1.0.27

ArGoSoft FTP Server prior to 1.4.2.8 allows remote malicious users to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519.

Argosoft Ftp Server 1.4.1.1 Argosoft Ftp Server 1.4.1.2 Argosoft Ftp Server 1.4.1.3 Argosoft Ftp Server 1.4.1.4 Argosoft Ftp Server 1.4.1.5 Argosoft Ftp Server 1.4.1.6 Argosoft Ftp Server 1.4.1.7 Argosoft Ftp Server 1.4.1.8 Argosoft Ftp Server 1.4.1.9 Argosoft Ftp Server 1.4.2 Argosoft Ftp Server 1.4.2.1 Argosoft Ftp Server 1.4.2.2

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook