16984 matches found
南京大汉网络有限公司某华为路由弱口令（可替换升级程序，可查看防火墙策略）
简要描述： 标题应该没侧漏吧 详细说明： 地址：221.226.56.34 ftp弱口令 ftp/aa123456 该设备为 华为Quidway自研以太网交换机 VRP版本升级需利用到ftp上传文件,因此可以上传替换掉升级程序 设备的文档我是参考这里的：http://wenku.baidu.com/view/26359187bceb19e8b8f6bae0.html 漏洞证明： 里面有 ftp open 221.226.56.34 用户221.226.56.34:none: ftp 密码: ftp ls sup.bin license.txt...
CVE-2014-0760
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service application crash vi...
Design/Logic Flaw
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via...
CVE-2014-0760
CVE-2014-0760 affects Festo CECX-X-C1 and CECX-X-M1 controllers (CoDeSys/SoftMotion). The issue is an undocumented FTP access path that allows remote attackers to execute arbitrary code or trigger a denial of service via unspecified vectors. Public exploitation is noted in ICS-CERT advisories; mu...
CVE-2014-0760 Festo CECX-X-(C1/M1) Controller Improper Authentication
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service application crash vi...
PT-2014-3822 · 3S Smart Software Solutions +1 · Codesys +2
Name of the Vulnerable Software and Affected Versions: Festo CECX-X-C1 Modular Master Controller with CoDeSys version affected versions not specified Festo CECX-X-M1 Modular Controller with CoDeSys version affected versions not specified Description: The issue involves an undocumented access meth...
CVE-2014-2735
WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
Code injection
WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2014-2735
WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2014-2735
WinSCP (Windows FTP client) is affected by CVE-2014-2735 due to missing validation of the server X.509 certificate hostname when using FTP over TLS. The issue allows MITM spoofing of SSL servers with an arbitrary valid certificate because the client does not verify the CN or subjectAltName. Affec...
Ubuntu Update for curl USN-2167-1
Check for the Version of curl OpenVAS Vulnerability Test $Id: gbubuntuUSN21671.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for curl USN-2167-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
USN-2167-1: curl vulnerabilities
Steve Holme discovered that libcurl incorrectly reused wrong connections when using protocols other than HTTP and FTP. This could lead to the use of unintended credentials, possibly exposing sensitive information. CVE-2014-0138 Richard Moore discovered that libcurl incorrectly validated wildcard...
SSL/TLS: FTP 'AUTH TLS' Command Detection
Checks if the remote FTP server supports SSL/TLS FTPS with the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ASUS RT Series Routers FTP Service - Default anonymous access
Five ASUS RT series routers suffer from a vendor vulnerability that default FTP service to anonymous access, full read/write permissions. The service, which is activated from the administrative console does not give proper instructions nor indications that the end user needs to manually add a use...
CVE-2013-3930
Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply...
Stack overflow
Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply...
CVE-2013-3930
CVE-2013-3930 affects Core FTP before 2.2 build 1785. A stack-based buffer overflow allows a remote FTP server to execute arbitrary code by sending a crafted directory name in a CWD command reply; exploitation is possible remotely and does not require user interaction. Remediation per sources is ...
CVE-2013-3930
Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply...
KLA10129 ACE vulnerability in Core FTP
A buffer overflow was found in Core FTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server reply. Original advisories Core FTP changelog Related products Core-FTP-client...
Updated curl packages fix multiple vulnerabilities
Updated curl packages fix security vulnerabilities: Paras Sethia discovered that libcurl would sometimes mix up multiple HTTP and HTTPS connections with NTLM authentication to the same server, sending requests for one user over the connection authenticated as a different user CVE-2014-0015. libcu...