Filtered by vendor Kmint21 Software
Subscriptions
Total
9 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2010-20113 | 1 Kmint21 Software | 1 Easyftp Server | 2025-08-23 | N/A |
EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the stack, potentially corrupting control flow structures. The vulnerability is exposed through the embedded web server and does not require authentication due to default anonymous access. The issue was resolved in version 1.7.0.12, after which the product was renamed to UplusFtp. | ||||
CVE-2010-20121 | 1 Kmint21 Software | 1 Easyftp Server | 2025-08-23 | N/A |
EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed “UplusFtp.” | ||||
CVE-2005-1484 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "\.." (backward slash dot dot) with a leading '"' (double quote) in the GET command. | ||||
CVE-2005-2142 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a "\.." (backslash dot dot) in an LS (LIST) command. | ||||
CVE-2005-4553 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | ||||
CVE-2006-2180 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long argument to the (1) NLST or (2) APPE commands, as demonstrated by the Infigo FTPStress Fuzzer. | ||||
CVE-2005-0566 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command. | ||||
CVE-2005-1485 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message. | ||||
CVE-2005-0634 | 1 Kmint21 Software | 1 Golden Ftp Server | 2025-04-03 | N/A |
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command. |
Page 1 of 1.