EUVD-2014-5109

Malware in sbrugna...

EUVD-2014-0636

Malware in sbrugna...

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0604

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

Directory traversal

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

Memory corruption

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

CVE-2014-0603

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

CVE-2014-0604

CVE-2014-0604 is a directory traversal vulnerability in the Attachmate Reflection FTP Client’s rftpcom.dll ActiveX control (and Attachmate Reflection Secure FTP Client per ZDI) that allows remote code execution via the StartLog method. The flaw exists before version 14.1.429. Exploitation details...

CVE-2014-0603

The issue is Attachmate Reflection FTP Client’s rftpcom.dll ActiveX control (GetGlobalSettings, GetSiteProperties3) causing memory corruption leading to remote code execution. CVE-2014-0603 details: memory corruption with execution of arbitrary code via those methods on affected builds before 14....

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0605

The connected advisories confirm CVE-2014-0605 affects Attachmate Reflection FTP Client (rftpcom.dll ActiveX) with a directory traversal flaw in the SaveSettings method that enables remote code execution. Affected software includes versions prior to 14.1.429; ZDI notes exploitation requires user ...

CVE-2014-0603: Improper Control of Generation of Code

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

CVE-2014-0605: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0604: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

CVE-2014-5211: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

PT-2015-3788

Name of the Vulnerable Software and Affected Versions Attachmate Reflection FTP Client versions prior to 14.1.433 Description The issue is related to a stack-based buffer overflow that can be triggered by a large PWD response from a remote FTP server, allowing the execution of arbitrary code...

Attachmate Reflection FTP Client ActiveX GetGlobalSettings Memory Corruption (CVE-2014-0603)

A memory corruption vulnerability has been found in Attachmate Reflection FTP Client. The vulnerability is due to an attempt to dereference user-controllable parameter input. Successful exploitation could lead to arbitrary code execution under the security context of the browser...

PT-2014-3703

Name of the Vulnerable Software and Affected Versions Attachmate Reflection FTP Client versions prior to 14.1.429 Description The issue is related to a directory traversal vulnerability in the rftpcom.dll ActiveX control. This vulnerability allows remote attackers to execute arbitrary code via...

PT-2014-3702

Name of the Vulnerable Software and Affected Versions Attachmate Reflection FTP Client versions prior to 14.1.429 Description The issue allows remote attackers to cause a denial of service and execute arbitrary code via vectors related to the GetGlobalSettings or GetSiteProperties3 methods, which...

PT-2014-3704

Name of the Vulnerable Software and Affected Versions Attachmate Reflection FTP Client versions prior to 14.1.429 Description The issue is related to a directory traversal vulnerability in the rftpcom.dll ActiveX control. This vulnerability allows remote attackers to execute arbitrary code via...