CVE-2010-3100

Directory traversal vulnerability in Porta+ FTP Client 4.1, and possibly other versions, allows remote FTP servers to overwrite arbitrary files via a directory traversal sequences in a filename...

CVE-2010-3098

Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3098

CVE-2010-3098 affects IoRush Software FTP Rush 1.1.3 (and possibly earlier). The issue is a directory-traversal flaw caused by insufficient sanitization of the downloaded filename, allowing a remote FTP server to push a filename containing traversal sequences (e.g., ..) and overwrite arbitrary fi...

CVE-2010-3096

Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via ".." dot dot backslash sequences in a filename...

CVE-2010-3104: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DeskShare AutoFTP Manager 4.31, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3099: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party informatio...

CVE-2010-3101: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FTPx Corp FTP Explorer 10.5.19.1 for Windows, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3097: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3096: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via ".." dot dot backslash sequences in a filename...

Multiple Vendors OPIE Off-By-One Stack Buffer Overflow (CVE-2010-1938)

"One time Passwords In Everything" OPIE is a Unix-like login and password package installed on the server and the client which makes untrusted networks safer against password-sniffing packetanalysis software. The OPIE package is sometimes used by FTP servers to provide security for an FTP session...

Command injection

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT...

CVE-2010-0962

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT...

Botnets Targeting Full Spectrum of Servers

Web servers, FTP servers, and even SSL servers are becoming prime targets for botnet operators, not as command and control servers or as pure zombies, but more as a place to host their malicious code and files, or in some cases to execute high-powered spam runs. Read the full article. Dark Readin...

[SECURITY] Fedora 11 Update: wget-1.12-2.fc11

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 12 Update: wget-1.12-2.fc12

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 10 Update: awstats-6.95-1.fc10

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

Buffer overflow

Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service and possibly execute arbitrary code via unspecified FTP server responses. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-4103: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service and possibly execute arbitrary code via unspecified FTP server responses. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Buffer overflow

Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service application crash or execute arbitrary code via a long 220 reply aka connection greeting or welcome message...

CVE-2009-3976

Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service application crash or execute arbitrary code via a long 220 reply aka connection greeting or welcome message...