K61186963: cURL vulnerability CVE-2020-8285

Security Advisory Description curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. CVE-2020-8285 Impact A malicious FTP server can trigger a stack overflow and cause a denial-of-service DoS on the F5 product that ...

K12487579: Apache vulnerabilities CVE-2018-1282, CVE-2018-1284, CVE-2018-1295, CVE-2018-1308, and CVE-2018-1315

Security Advisory Description CVE-2018-1282 This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation. CVE-2018-1284 In Apache Hive 0.6.0 to 2.3.2,...

K20984059: BIG-IP LTM vulnerability CVE-2020-5949

Security Advisory Description Certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel to break. CVE-2020-5949 Impact FTP traffic is disrupted. FTP clients are unable to connect to the FTP server and commands issued to the FTP server stall or fail...

K15897: Wget vulnerability CVE-2014-4877

Security Advisory Description Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of...

K22234807: Apache vulnerability CVE-2009-3094

Security Advisory Description The approxyftphandler function in modules/proxy/proxyftp.c in the modproxyftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service NULL pointer dereference and child process crash via a malformed reply to an EPSV...

K80080243: Apache vulnerability CVE-2009-3095

Security Advisory Description The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a...

CVE-2022-46637

Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services...

PT-2023-14973 · Prolink · Prolink Router Prs1841

Name of the Vulnerable Software and Affected Versions: Prolink router PRS1841 Description: The Prolink router PRS1841 contains hardcoded credentials for its Telnet and FTP services. This issue allows unauthorized access to the device. Recommendations: For Prolink router PRS1841, consider changing...

CVE-2022-46637

CVE-2022-46637 concerns the ProLink router PRS1841, which is reported to contain hardcoded credentials for Telnet and FTP, enabling unauthorized access. The CVE entry cites a CRITICAL 9.8 CVSS score (Network vector, low complexity, no user interaction) with high impact on confidentiality, integri...

CVE-2022-46637

Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services...

zeek -- potential DoS vulnerabilities

Tim Wojtulewicz of Corelight reports: Receiving DNS responses from async DNS requests via the lookupaddr, etc BIF methods with the TTL set to zero could cause the DNS manager to eventually stop being able to make new requests. Specially-crafted FTP packets with excessively long usernames,...

FreeBSD : zeek -- potential DoS vulnerabilities (7a425536-74f7-4ce4-9768-0079a9d44d11)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7a425536-74f7-4ce4-9768-0079a9d44d11 advisory. - Tim Wojtulewicz of Corelight reports: Receiving DNS responses from async DNS requests via the...

aubio-sys (>=0.2.0 <=0.2.1), bioutils (>=0.1.5 <=0.2.4) +31 more potentially affected by unknown CVE via ftp (=3.0.1)

ftp CARGO version =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ftp and may be impacted: - aubio-sys =0.2.0, =0.1.5, =0.2.0, =0.32.0, =0.0.1, =0.6.0, =0.6.0, =0.1.0, =0.0.1, =1.1.1, =0.3.0, =0.5.0, =0.0.1, =0.4.17, =0.6.0 and more Source cves:...

ftp is unmaintained, use suppaftp instead

The ftp crate is not maintained any more; use suppaftp instead...

RUSTSEC-2023-0043 ftp is unmaintained, use suppaftp instead

The ftp crate is not maintained any more; use suppaftp instead...

PT-2023-36092 · Ftp · Ftp

Name of the Vulnerable Software and Affected Versions: ftp affected versions not specified Description: The ftp crate is no longer maintained. It is recommended to use the suppaftp crate instead. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

[SECURITY] Fedora 37 Update: curl-7.85.0-6.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-102.8.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

CVE-2022-48307

It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack...

CVE-2022-48307

It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack...