uftpd Null Pointer Dereference Vulnerability

uftpd is a Linux FTP/TFTP server. A null pointer dereference vulnerability exists in uftpd versions prior to 2.12. The vulnerability stems from the failure of handleCWD in ftpcmd.c in uftpd to properly handle user-supplied paths. An attacker can cause a denial of service via the CWD /... command ...

Information disclosure

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[SECURITY] [DSA 1217-1] New linux-ftpd packages fix access control bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1217-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20th, 2006 http://www.debian.org/security/faq -...

DSA-1217-1 linux-ftpd

Bulletin has no description...

DEBIAN-CVE-2006-5778

ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a restricted directory...

DEBIAN-CVE-2005-3524

Buffer overflow in the SSL-ready version of linux-ftpd linux-ftpd-ssl 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command...

CVE-1999-1333

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...

Potential Security Problem in bftpd-1.0.11

Subject : Potential security problem in bftpd Buffer Overflow Author : Christophe BAILLEUX [email protected] Plateforms : nix Test version : bftpd-1.0.11 I. Introduction bftpd is a Linux FTP server with chroot and setreuid. Not all FTP commands are included. It accesses either the user's home directo...

Linux FTP Server Backdoor Detection

There is a backdoor in the old FTP daemons of Linux that allows remote users to log in as 'NULL' with password 'NULL'. These credentials provide root access. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10080; scriptversion "1.27"; scriptcvsdate"Date: 2018/06/13...