8 matches found
EUVD-2009-4289
Malware in sbrugna...
OPENSUSE-SU-2023:0421-1 Security update for proftpd
This update for proftpd fixes the following issues: Update to version 1.3.8a Implemented mitigations for 'Terrapin' SSH attack CVE-2023-48795. http://proftpd.org/docs/NEWS-1.3.8b...
UBUNTU-CVE-2023-51713
makeftpcmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics...
CVE-2023-51713
ProFTPD (make_ftp_cmd in main.c) is affected by CVE-2023-51713 in versions before 1.3.8a due to a one-byte out-of-bounds read caused by mishandling of quote/backslash semantics, leading to daemon crashes. Affected advisories reference ProFTPD before 1.3.8a across multiple vendors (Debian, Ubuntu,...
ProFTPd Security Vulnerability
ProFTPd is a highly configurable open source FTP server software. A security vulnerability exists in ProFTPd versions prior to 1.3.8a, which stems from improper handling of the semantics of the makeftpcmd function in the file main.c, resulting in an out-of-bounds read vulnerability and a daemon...
PT-2023-8972 · Proftpd +3 · Proftpd +3
Name of the Vulnerable Software and Affected Versions: ProFTPD versions prior to 1.3.8a Description: The issue is related to the make ftp cmd function in the main.c component of the ProFTPD FTP server, which mishandles quote and backslash semantics. This leads to a one-byte out-of-bounds read and...
Zen Cart 1.3.8a File Upload
File upload vulnerability in Zen Cart Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
CVE-2009-2255
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/recordcompany.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the recordcompanyimage parameter in conjunction with a PATHINFO of passwordforgotten.php, then...