CVE-2008-2779

Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 allows remote FTP servers to create or overwrite arbitrary files via ..\ dot dot backslash sequences in responses to LIST commands, a related issue to CVE-2002-1345. NOT...

3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal

source: https://www.securityfocus.com/bid/29749/info 3D-FTP is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues allows an attacker to write arbitrary files to locations outside of the FTP client's...

CVE-2008-0303

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce...

CVE-2007-5201

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...

IBM AIX <= 5.3 sp6 ftp gets() Local Root Exploit

No description provided by source. / 07/2007: public release IBM AIX = 5.3 sp6 AIX ftp Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include unistd.h include sys/wait.h include sys/select.h define TARGET "/usr/bin/ftp" define OVERLEN 300 define MAXx,y x y ? x : y...

Code injection

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217...

Crlf injection

CRLF injection vulnerability in the ftpputcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands...

CVE-2007-2509

CRLF injection vulnerability in the ftpputcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands...

[Full-disclosure] Remote DOS HP JetDirect Print Servers

Vulnerability : Remote DOS HP JetDirect Print Servers Product : HP JetDirect Print Servers "HP LaserJet Series" By: Handrix handrixatmorxorg 26 March 2007 MorX security research team www.morx.org +-------------+ | Description...

CVE-2007-1563

The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

KDE Konqueror 3.xIOSlave - FTP PASV Port-Scanning

KDE Konqueror 3.xIOSlave - FTP PASV Port-Scanning source: https://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect...

[ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:017 http://www.mandriva.com/security/ Package : wget Date : January 15, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The ftpsyst function in...

OpenBSD ftp Exploit (teso)

No description provided by source. / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be...

Open the broiler FTP-vulnerability warning-the black bar safety net

When using the remote Manager in the broiler to download the file, there are usually several methods: 1: With Email delivery. Suitable for transfer small files. 2: in broilers a QQ directly on the line to transfer files. Suitable for delivery of a single, but the file is not the file. 3: help in...

HP-UX Security patch : PHNE_15802

The remote host is missing HP-UX Security Patch number PHNE15802 . Security Vulnerability with ftp on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16970; scriptversion"1.7"...

HP-UX Security patch : PHNE_16006

The remote host is missing HP-UX Security Patch number PHNE16006 . Security Vulnerability with ftp on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16698; scriptversion"1.7"...

HP-UX Security patch : PHNE_23948

The remote host is missing HP-UX Security Patch number PHNE23948 . SSRT4883 ftp and ftpd remote unauthorized access %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16578;...

HP-UX Security patch : PHNE_13596

The remote host is missing HP-UX Security Patch number PHNE13596 . Security Vulnerability with ftp on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16519; scriptversion"1.8"...

HP-UX Security patch : PHNE_5965

The remote host is missing HP-UX Security Patch number PHNE5965 . Security Vulnerability in FTP %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16568; scriptversion"1.6";...

HP-UX PHCO_17601 : s700_800 11.00 libc cumulative patch

s700800 11.00 libc cumulative patch : Security Vulnerability during ftp operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO17601. The text itself is copyright C Hewlett-Packard Development Company,...