6380 matches found
CVE-2006-5950
Unspecified vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, probably due to response messages. NOTE: the provenance of this information is unknown; details...
CVE-2006-5947
Conxint FTP Server 2.2.0603 (and possibly earlier) is affected by multiple directory traversal vulnerabilities that allow remote attackers to read arbitrary files and list arbitrary directories via traversal sequences in the DIR (LIST/NLST) and GET (RETR) commands. The underlying issue is directo...
CVE-2006-5950
The CVE concerns ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier). The vulnerability allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, likely due to response messages. Impact is noted as Partial confidentiality; no exploits...
CVE-2006-5949
Directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote attackers to create arbitrary directories via directory traversal sequences in a MKD request. NOTE: the provenance of this information is unknown; details are obtained from third party...
CVE-2006-5949
CVE-2006-5949 describes a directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier) . The issue allows remote attackers to exploit MKD requests to create arbitrary directories via directory traversal sequences. The description notes the vulnerability details ...
CVE-2006-5947
Multiple directory traversal vulnerabilities in Conxint FTP Server 2.2.0603, and possibly earlier, allow remote attackers to read arbitrary files and list arbitrary directories via directory traversal sequences in 1 DIR LIST or NLST and 2 GET RETR commands. NOTE: the provenance of this informatio...
[OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory OpenPKG GmbH http://openpkg.org/security/ http://openpkg.com OpenPKG-SA-2006.035 2006-11-16 Package: proftpd Vulnerability: denial of service OpenPKG Specific: no Affected Series: Affected Packages: Corrected Packages:...
[NT] Selenium FTP Server Directory Traversal
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Teamtek Universal FTP Server - Multiple Commands Remote Denial of Service Vulnerabilities
Teamtek Universal FTP Server - Multiple Commands Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An...
Teamtek Universal FTP Server - Multiple Commands Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can exploit these issues to crash the affected application, denying service to...
NetKit FTP Server chdir错误设置用户UID/GID漏洞
NetKit是运行在Linux平台下的工具包。 Netkit FTP Server在处理用户的UID/GID时存在漏洞，导致在某些情况下用户无法访问目录。 Netkit FTP Server（ftpd）在为登录进服务器的用户设置UID/GID之前以root身份执行了chdir操作，这可能导致某些情况下，比如通过NFS输出HOME目录共享，导致目前设置错误的访问权限。 Netkit Linux Netkit 0.17 Gentoo已经为此发布了一个安全公告（GLSA-200611-05）以及相应补丁: GLSA-200611-05：Netkit FTP Server: Privilege...
HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation
source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...
HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation
HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits...
Gene6 FTP Server本地权限提升漏洞
Gene6 FTP Server是一款非常流行的Microsoft Windows平台的FTP Server。 默认安装后，本地的非特权用户可以修改Gene6 FTP Server的设置，例如添加新的SITE命令。由于Gene6 FTP Server是以SYSTEM权限运行的，因此攻击者可以轻易的提升权限。 Gene6 G6 FTP Server http://marc.theaimsgroup.com 1. 以非特权用户的身份登陆。 2. 打开Gene6 FTP Server控制台，添加FTP用户帐号，如“test” 3. 对FTP...
[Full-disclosure] [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation
Gentoo Linux Security Advisory GLSA 200611-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Netkit FTP Server protection bypass
Invalid chroot and seteuid usage under some circumstances allow FTP root directory bypass...
Netkit FTP Server: Privilege escalation
Background net-ftp/netkit-ftpd is the Linux Netkit FTP server with optional SSL support. Description Paul Szabo reported that an incorrect seteuid call after the chdir function can allow an attacker to access a normally forbidden directory, in some very particular circumstances, for example when...
WarFTPd FTP Server format string vulnerability
CWD command format string vulnerability...
WarFTPd 1.82.00-RC11 - Remote Denial of Service
!/usr/bin/env python import sys import ftplib print "WARFTPD Remote Denial Of Service DOS" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg = ftp.connecttarget, targetPort print "+ Ok. Target banner" print m...