[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-45.3.0-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. F...

PHP < 5.4.42, 5.5.x < 5.5.26, 5.6.x < 5.6.10 Multiple Vulnerabilities (Aug 2016) - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

[slackware-security] kernel

New kernel packages are available for Slackware 14.1 to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/linux-3.10.103/: Upgraded. A flaw was found in the implementation of the Linux kernels handling of networking challenge ack where an attacker is...

[SECURITY] Fedora 25 Update: filezilla-3.21.0-1.fc25

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

RHEL 6 : kernel (RHSA-2016:1664)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

[slackware-security] Linux kernel

New Linux kernel packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.19/: Upgraded. A flaw was found in the implementation of the Linux kernels handling of networking challenge ack where...

PHP 5.6.x < 5.6.25 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.25. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the objectcommon2 function in varunserializer.c that occurs when handling objects during deserialization...

ColoradoFTP Server Remote Detection

Detects the installed version of ColoradoFTP Server. The script sends a connection request to the server and attempts to extract the version from the reply SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Easy FTP Server 1.7.0.11 APPE remote code execution vulnerability

No description provided by source. !/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team Easy FTP server remote exploit DATE 03/03/2012 DESCRIPTION Easy FTP Server - "APPE" command buffer overflow - remote exploit...

Taser Axon Dock 3.1 Authentication Bypass

TITLE Taser Axon Dock Body-Worn Camera Docking Station v3.1 - Authentication Bypass CREDITS & AUTHORS Reginald Dodd https://www.linkedin.com/in/reginalddodd VENDOR & PRODUCT Taser International Inc. Axon Dock - Body-Worn Camera Docking Station https://www.axon.io/products/dock SUMMARY The Axon Do...

Home Ftp Server Remote Directory Traversal Vulnerability

Home Ftp Server is an FTP service software, FTP service allows us to download and upload files to FTP server freely. The latest version of this software suffers from a directory traversal vulnerability that allows an attacker to access files outside of the user's directory...

FreeBSD : FreeBSD -- Remote command execution in ftp(1) (7488378d-6007-11e6-a6c3-14dae9d210b8)

A malicious HTTP server could cause ftp1 to execute arbitrary commands. Impact : When operating on HTTP URIs, the ftp1 client follows HTTP redirects, and uses the part of the path after the last '/' from the last resource it accesses as the output filename if '-o' is not specified. If the output...

openSUSE Security Update : wget (openSUSE-2016-973)

This update for wget fixes the following issue : - CVE-2016-4971: HTTP to a FTP redirection file name confusion vulnerability boo984060. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

ColoradoFTP 1.3 Prime Edition (Build 8) - Directory Traversal

Exploit for php platform in category web applications 01. Advisory Information Title: Directory Traversal Vulnerability in ColoradoFTP v1.3 Prime Edition Build 8 Date published: n/a Date of last update: n/a Vendors contacted: ColoradoFTP author Sergei Abramov Discovered by: Rv3Laboratory Research...

ColoradoFTP Server 1.3 Build 8 Directory Traversal Information Disclosure

This module exploits a directory traversal vulnerability found in ColoradoFTP server version use auxiliary/scanner/ftp/colorado/ftptraversal msf undefinedftptraversal show actions ...actions... msf undefinedftptraversal set ACTION msf undefinedftptraversal show options ...show and set options...

ColoradoFTP 1.3 Prime Edition (Build 8) - Directory Traversal

ColoradoFTP 1.3 Prime Edition Build 8 - Directory Traversal 01. Advisory Information Title: Directory Traversal Vulnerability in ColoradoFTP v1.3 Prime Edition Build 8 Date published: n/a Date of last update: n/a Vendors contacted: ColoradoFTP author Sergei Abramov Discovered by: Rv3Laboratory...

USN-3048-1: curl vulnerabilities

Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. CVE-2016-5419 It was discovered that curl incorrectly handled client certificates when reusing TLS connections. CVE-2016-5420 Marcelo Echeverria and Fernando Muñoz discovered that curl incorrectly...

[slackware-security] curl

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.50.1-i586-1slack14.2.txz: Upgraded. This release fixes security issues: TLS: switch off SSL sessi...

NUUO NVRmini 2 3.0.8 - Remote Command Injection (Shellshock)

NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: Firmware Version: 02.02.00 NVR Version: 02.02.0000.0040 Device Pack Version: 04.07.0000.0030 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS...

zFTP Client 20061220 - 'Connection Name' Local Buffer Overflow

Exploit for linux platform in category local exploits Program affected: zFTP Client Affected value: NAME under FTP connection Where in the code: Line 30 in strcpychk.c strcpychk dest=0xb7f811c0 "/KUIP", src=0xb76a6680 "/MACRO", destlen=0x50 at strcpychk.c:30 Version: 20061220+dfsg3-4.1 Tested and...