Exploits a condition where a remote user can arbitrary control the pointer to the association contained in a "Association Delete Message". This condition is abused to corrupt a function pointer in the application and install an agent. At the same time, another option of the protocol is used to populate the heap with executable code and increase the success possibilities.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of software utilizing WinGate. The vulnerability is caused due to a boundary error within the handling of POST requests. This may allow execution of arbitrary code by sending an overly long, specially crafted POST request to the proxy server.
An internal memory buffer may be overrun while handling long "SIZE" command. This condition may be exploited by attackers to ultimately execute instructions with the privileges of the WFTPD Server process. The WFTPD Server server will be left inaccessible after successful exploitation.
WarFTPd is a popular FTP server for Windows systems. WarFTPd is vulnerable to a buffer overflow in the way it handles the PASS command. This bug will be exploited in order to install an agent into the target machine. The WarFTPd server will be left inaccessible after successful exploitation.
This vulnerability allows remote attackers to execute arbitrary code on installations of Vermillion FTP Daemon, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error with the handling of PORT commands. This can be exploited to cause a stack-based buffer overflow via an overly long, specially-crafted command passed to the affected server.