Hitachi JP1/File Transmission Server/FTP安全绕过漏洞

JP1/File Transmission Server/FTP是日立公司设计的基于FTP的文件传输服务器。 安全问题是由于应用程序没有正确限制访问目录，可被利用来访问其它受限制的目录。 0 Hitachi JP1/File Transmission Server/FTP 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/jp1/popup/ftp.html...

[SECURITY] Fedora 20 Update: libssh-0.6.3-1.fc20

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

AIX WPAR vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Thu Mar 6 11:54:14 CST 2014 | Updated: Tue Apr 8 09:03:53 CDT 2014 | Update: File set level for affected vwpar.53.rte corrected The most recent version of this document is available here:...

Camel: remote code execution via header field manipulation

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple" in a CamelFileName message header to a 1 FILE or 2 FTP producer...

CoreFTP本地代码执行漏洞

CVE ID:CVE-2013-1215 Core FTP Server是一款FTP服务程序。 Core FTP Server在使用lstrcpy和RegQueryValueEx函数来拷贝config.data文件或windows注册表中的数据时存在缓冲区溢出，允许攻击者利用漏洞使应用程序崩溃或执行任意代码。 0 Core FTP Server v1.2 build 505 厂商补丁： Core FTP ----- Core FTP Server v1.2 build 508已经修复该漏洞，建议用户下载更新： http://ww.coreftp.com/server...

Konqueror FTP IFrame Null Pointer Dereference Denial of Service - Ver2 (CVE-2007-1308)

A denial-of-service vulnerability has been reported in KDE Konqueror 3.5.5. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Cisco IOS FTP Server Remote Buffer Overflow - Ver2 (CVE-2007-2586)

A buffer overflow vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

[Responder] a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server

Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. This tool is first an LLMNR and NBT-NS responder, it will answer to specific NBT-NS NetBIOS Name...

[slackware-security] subversion (SSA:2014-058-01)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security subversion SSA:2014-058-01 New subversion packages are available for Slackware 14.0, 14.1, and -current to fix denial-of-service issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

Core FTP Server Detection

Binary data coreftpserverdetect.nbin...

Core FTP 'AUTH SSL' 命令拒绝服务漏洞

BUGTRAQ ID: 65432 CVECAN ID: CVE-2014-1441 CoreFTP是免费的FTP客户端。 Core FTP 1.2 build 511及其他版本处理AUTH SSL命令时存在错误，这可使攻击者通过特制的SSL证书，造成服务器崩溃。 0 Core FTP Core FTP 1.x 厂商补丁： Core FTP -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.coreftp.com/...

Serv-U FTP Server < 15.0.1.20 DoS

According to its banner, the installed version of Serv-U is a version prior to version 15.0.1.20. It is, therefore, affected by an unspecified denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Core FTP 'USER' 命令信息泄露漏洞

BUGTRAQ ID: 65428 CVECAN ID: CVE-2014-1443 CoreFTP是免费的FTP客户端。 Core FTP 1.2 build 511及其他版本处理XCRC命令时存在错误，这可使攻击者利用目录遍历序列，获取FTP根目录以外的文件名。 0 Core FTP Core FTP 1.x 厂商补丁： Core FTP -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.coreftp.com/ Proof of Concept: 1 Log into the Core FTP Server with a...

Core FTP Server < 1.2 Build 508 lstrcpy Overflow Code Execution

The version of Core FTP running on the remote host is prior to 1.2 build 508. It is, therefore, affected by buffer overflow conditions in the RegQueryValueExA and lstrcpy functions due to improper validation of user-supplied input when reading data from the config.dat file and/or from the Windows...

Core FTP Server < 1.2 Build 515 Multiple Vulnerabilities

The version of Core FTP running on the remote host is prior to 1.2 build 515. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists that is triggered when handling malformed data after the 'AUTH SSL' command. An unauthenticated, remote attacker can...

PCMan's FTP Server 'ABOR'命令缓冲区溢出漏洞

BUGTRAQ ID: 65289 PCMan's FTP Server是简单易于的基础FTP服务器。 PCMan's FTP Server 2.07版本在处理特制的USER, PASS, STOR, ABOR, CWD命令时没有正确验证用户提供的输入，在实现上存在溢出漏洞，这可使远程攻击者造成拒绝服务，执行任意代码。 0 sourceforge PCMan's FTP Server 2.07 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/pcmanftpd/ Exploit...

PCMan FTP Server 2.07 - Remote Buffer Overflow

Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow unauthenticated Date: Feb 19, 2014 Exploit Author: Sumit Version: 2.07 Tested on: Windows XP Professional SP3 Description: Buffer overflow is triggered upon sending long string to PCMAN FTP 2.07 in place of command import socket import...

kernel

New kernel packages are available for Slackware 14.1 64-bit to fix a security issue. Here are the details from the Slackware64 14.1 ChangeLog: patches/packages/linux-3.10.17-2/: These are new kernels that fix CVE-2014-0038, a bug that can allow local users to gain a root shell. Be sure to reinsta...

PCMan's FTP Server 'CWD'命令缓冲区溢出漏洞

BUGTRAQ ID: 65299 PCMan's FTP Server是简单易于的基础FTP服务器。 PCMan's FTP Server 2.07版本在处理特制的USER, PASS, STOR, ABOR, CWD命令时没有正确验证用户提供的输入，在实现上存在溢出漏洞，这可使远程攻击者造成拒绝服务，执行任意代码。 0 sourceforge PCMan's FTP Server 2.07 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/pcmanftpd/ Exploit...

Linksys EA2700, EA3500, E4200, EA4500 Authentication Bypass

Linksys products EA2700, EA3500, E4200, and EA4500 suffer from having an unauthenticated interface on port 8083 periodically. Vulnerable products : Linksys EA2700, EA3500, E4200, EA4500 Vulnerability: Due to an unknown bug, which occurs by every indication during the installation and/or upgrade...