Datawizard Ftpxq vulnerabilities

CVE-2001-0293 [MEDIUM] CVE-2001-0293: Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitra Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command.

CVE-2006-5568 [MEDIUM] CWE-399 CVE-2006-5568: FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command.

CVE-2001-1213 [MEDIUM] CVE-2001-1213: The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.

CVE-2006-5569 [MEDIUM] CVE-2006-5569: FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

CVE-2002-1920 [MEDIUM] CVE-2002-1920: Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.