Moderate: Red Hat Security Advisory: gftp security update

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

CVE-2004-1682

The CVE-2004-1682 entry concerns the QNX 6.1 FTP client, where a format string vulnerability in the QUOTE command can allow remote authenticated users to obtain group bin privileges. The root cause is improper handling of format specifiers in QUOTE, enabling privilege escalation. The provided doc...

CVE-2004-1682

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

gFTP FTP client directory traversal

Directory traversal during downloading file from server...

Debian DSA-686-1 : gftp - missing input sanitising

Albert Puigsech Galicia discovered a directory traversal vulnerability in a proprietary FTP client CAN-2004-1376 which is also present in gftp, a GTK+ FTP client. A malicious server could provide a specially crafted filename that could cause arbitrary files to be overwritten or created by the...

DSA-686-1 gftp - missing input sanitising

Bulletin has no description...

HP-UX PHNE_14479 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : ftp client interprets server provided filenames which can cause commands to be run on the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE14479. The text itself...

CVE-2003-1078

The CVE-2003-1078 entry concerns the FTP client for Solaris 2.6, 7, and 8. When the debug (-d) flag is enabled, the client displays the user password on the screen during login, revealing the password in cleartext. The available documents confirm the affected software and the login-password expos...

CVE-2003-1078

The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...

gftp -- directory traversal vulnerability

A Debian Security Advisory reports: Albert Puigsech Galicia discovered a directory traversal vulnerability in a proprietary FTP client CAN-2004-1376 which is also present in gftp, a GTK+ FTP client. A malicious server could provide a specially crafted filename that could cause arbitrary files to ...

tnftp: Arbitrary file overwriting

Background tnftp is a NetBSD FTP client with several advanced features. Description The 'mget' function in cmds.c lacks validation of the filenames that are supplied by the server. Impact An attacker running an FTP server could supply clients with malicious filenames, potentially allowing the...

CVE-2004-1327

Crystal FTP Client 2.8 is affected by a buffer overflow in the handling of LIST responses containing a file name with a long extension, allowing remote attackers to execute arbitrary code. The vulnerability specifics point to a remote code execution risk via crafted responses. The provided docume...

CVE-2004-1327

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...

CVE-2004-1327

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...

[SA13539] Junkie FTP Client Two Vulnerabilities

TITLE: Junkie FTP Client Two Vulnerabilities SECUNIA ADVISORY ID: SA13539 VERIFY ADVISORY: http://secunia.com/advisories/13539/ CRITICAL: Moderately critical IMPACT: System access, Manipulation of data WHERE: From remote SOFTWARE: Junkie FTP Client 0.x http://secunia.com/product/4415/ DESCRIPTION...

CuteFTP Professional FTP Command Response Remote Overflow

The remote host has the program CuteFTP.exe installed. CuteFTP is an FTP client which contains several buffer overflow conditions. Using this version of CuteFTP to connect to a malicious FTP server could cause the client to crash, or could result in arbitrary code execution. C Tenable Network...

ProFTPd 1.2.10 - Remote Users Enumeration

/ Details Vulnerable Systems: ProFTPD Version 1.2.10 and below It is possible to determine which user names are valid, which are special, and which ones do not exist on the remote system. This can be accomplished by code execution path timing analysis attack at the ProFTPd login procedure. There ...

Multipel QNX utilities bugs

Buffer overflow in Photon, format string in FTP client, race conditions in crrtrap...

[RLSA_03-2004] QNX ftp client format string bug

rfdslabs security advisory Title: QNX ftp client format string bug RLSA03-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 13 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction "QNX Software Systems has provided OS technology, development tools,...

WS_FTP Pro Client Weak Password Encrypted

The version of WSFTP client installed on the remote host uses a weak encryption method to store password information. A local attacker could exploit this to discover FTP passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14597; scriptversion"1.15";...