104 matches found
CVE-2014-5815
CVE-2014-5815 affects the Android app Solitaire Arena (com.mavenhut.solitaire) version 1.0.15. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. This is the co...
CVE-2013-5815
CVE-2013-5815 affects the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 4.1 and 5.0. The vulnerability is described as unspecified with impact on confidentiality, integrity, and availability and is exploitable via unknown v...
CVE-2012-5815
The Rackspace app 2.1.5 for iOS is reported to not verify that the server hostname matches a domain in the certificate’s CN/subjectAltName, enabling man-in-the-middle via arbitrary valid certificates. According to the NVD entry, this yields partial confidentiality and partial integrity impact wit...
CVE-2006-5815
creationtimestamp| type| source ---|---|--- 2011-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16852 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ftp/proftpsreplace.rb 2025-02-06 03:13:38+00:00| seen|...
ProFTPD SReplace Function Buffer Overflow (CVE-2006-5815)
The ProFTPD server is a full featured File Transfer Protocol FTP server mainly used in Linux distributions. Aside from the standard FTP features, the server supports a number of extensions. There exists a buffer overflow vulnerability in ProFTPD FTP server. The vulnerability is due to improper...
CVE-2008-5815
SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5815
The CVE-2008-5815 entry describes a SQL injection in Acomment.php of phpAlumni, exploitable via the id parameter to allow remote execution of arbitrary SQL. The vulnerability affects phpAlumni’s Acomment.php component and is supported by NVD/other records (e.g., exploit references). The provided ...
CVE-2008-5815
SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5815
creationtimestamp| type| source ---|---|--- 2008-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7621...
Gentoo Security Advisory GLSA 200611-26 (proftpd)
The remote host is missing updates announced in advisory GLSA 200611-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Debian Security Advisory DSA 1222-1 (proftpd)
The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...
Debian Security Advisory DSA 1222-1 (proftpd)
The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...
Debian Security Advisory DSA 1222-2 (proftpd)
The remote host is missing an update to proftpd announced via advisory DSA 1222-2. Due to technical problems yesterday's proftpd update lacked a build for the amd64 architecture, which is now available. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead ...
SonicWALL SSL VPN Client Remote ActiveX Multiple Vulnerabilities
Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method. CVE: CVE-2007-5815 Last...
CVE-2007-5815
This CVE describes an Absolute path traversal in the WebCacheCleaner ActiveX control (version 1.3.0.3) used by SonicWall SSL-VPN. Affected products: SSL-VPN 200 before 2.1 and SSL-VPN 2000/4000 before 2.5. The vulnerability allows remote attackers to delete arbitrary files by passing a full pathn...
ProFTPD < 1.3.0a Multiple Vulnerabilities
The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host is earlier than 1.3.0a. As such, it may be affected by one or more of the following vulnerabilities : - An off-by-one string manipulation flaw exist...
Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt2
May 16, 2007 Konstantin Lepikhov 1.3.0rel-alt2 - 1.3.0a stable release. - rollback alt-ltdl patch use alternate variant. - don't delete .la files due ltdlopenext breakage in this case. - remove previous CVE-2006-5815 fixes, use variant from Debian. - change packager. - cleanup obsoleted Conflicts...
Mandrake Linux Security Advisory : proftpd (MDKSA-2006:217-1)
A stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier, allows remote attackers to cause a denial of service, as demonstrated by vdproftpd.pm, a 'ProFTPD remote exploit.' CVE-2006-5815 Buffer overflow in the tlsx509nameoneline function in the modtls module, as used in...
[slackware-security] proftpd
New proftpd packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-5815 https://vulners.com/cve/CVE-2006-6170...
