Free Float FTP Server Remote Command Execution USER Command Buffer Overflow

This time the exploit is free because there is many similar exploits and this is just an extension with also GUI.. Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested ...

FreeFloat FTP Server Arbitrary File Upload

This module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and...

[SECURITY] Fedora 16 Update: libssh-0.5.3-1.fc16

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

[SECURITY] Fedora 18 Update: mc-4.8.6-2.fc18

Midnight Commander is a visual shell much like a file manager, only with many more features. It is a text mode application, but it also includes mouse support. Midnight Commander's best features are its ability to FTP, view tar and zip files, and to poke into RPMs for specific files...

FreeFTPD 'SFTP'身份验证机制绕过漏洞

BUGTRAQ ID: 56782 FreeFTPd是一款基于WeOnlyDo FTP/SFTP实现的免费FTP+SSL/SFTP服务器。 FreeFTPD 1.0.11及其他版本的SFTP身份验证机制存在错误，可被利用绕过身份验证进程，以服务权限执行任意代码。 0 freeFTPd 1.x 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 暂停使用freeFTPd。 厂商补丁： freeFTPd -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://freeftpd.com/...

Windows Gather FTP Explorer (FTPX) Credential Extraction

This module finds saved login credentials for the FTP Explorer FTPx FTP client for Windows. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Windows Gather FTP Explorer...

[SECURITY] Fedora 17 Update: libssh-0.5.3-1.fc17

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

Windows Gather FileZilla FTP Server Credential Collection

This module will collect credentials from the FileZilla FTP server if installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Windows Gather FileZilla FTP Server...

[SECURITY] Fedora 17 Update: awstats-7.0-9.fc17

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-thunderbird-17.0-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements. Fo...

Wing FTP Server Multiple ZIP Commands Parsing Remote DoS

The remote FTP server is running a version of Wing FTP Server earlier than 4.1.1. As such, it is reportedly affected by an authenticated denial of service attack triggered when parsing multiple ZIP commands. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62976;...

Microsoft IIS FTP服务远程命令注入漏洞（MS12-073)

BUGTRAQ ID: 56440 CVE ID: CVE-2012-2532 Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 Microsoft IIS FTP服务在与加密通讯渠道协商时，存在信息泄露漏洞。通过某些FTP命令可泄露某些信息。 0 Microsoft IIS 7.x 临时解决方法： 如果已经启用了IIS的"Operational"日志，则在分配给应用池自定义账户之前，请禁用...

Microsoft Internet Information Services security vulnerabilities

log files information leakage, FTP STARTTLS session command injection...

MS12-073: Vulnerabilities in Microsoft IIS Could Allow Information Disclosure (2733829) (uncredentialed check)

The FTP service in the version of Microsoft IIS 7.0 or 7.5 on the remote Windows host is affected by a command injection vulnerability that could result in unauthorized information disclosure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62940; scriptversion"1.11";...

CVE-2012-2532

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."...

Command injection

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. OpenVAS Vulnerability Test $Id: secpodms12-073.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IIS FTP Service Information Disclosure Vulnerability 2761226 Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2532

CVE-2012-2532 affects Microsoft Internet Information Services (IIS) FTP service in IIS 7.0 and 7.5. The vulnerability arises from the FTP service processing unspecified commands before TLS negotiation, enabling remote attackers to disclose sensitive information from responses to those commands (F...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-2532

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."...