Typsoft Ftp Server vulnerabilities

CVE-2005-3294 [MEDIUM] CWE-399 CVE-2005-3294: Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a de Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected.

CVE-2012-5329 [MEDIUM] CWE-119 CVE-2012-5329: Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of ser Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application crash) via a long string in an APPE command.

CVE-2009-1668 [MEDIUM] CWE-20 CVE-2009-1668: TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by se TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort) command without an active file transfer.

CVE-2001-1156 [MEDIUM] CVE-2001-1156: TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../.. TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.

CVE-2009-4105 [LOW] CWE-20 CVE-2009-4105: TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by se TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by sending an APPE (append) command immediately followed by a DELE (delete) command without sending file data in between these two commands.

CVE-2004-0325 [LOW] CVE-2004-0325: TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumpt TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using "//../qwerty".

CVE-2001-0294 [MEDIUM] CVE-2001-0294: Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitra Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command.

CVE-2002-0558 [MEDIUM] CVE-2002-0558: Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authentic Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* characters.

CVE-2002-1354 [MEDIUM] CVE-2002-1354: Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the conten Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command.

CVE-2004-0252 [MEDIUM] CVE-2004-0252: TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.