CVE-2005-2390

Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via 1 certain inputs to the shutdown message from ftpshut, or 2 the SQLShowInfo modsql directive...

ProFTPD < 1.3.0rc2 Multiple Remote Format Strings

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host suffers from multiple format string vulnerabilities, one involving the 'ftpshut' utility and the other in modsql's 'SQLShowInfo' directive...

CVE-2005-2390: Undefined Security Weakness

Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via 1 certain inputs to the shutdown message from ftpshut, or 2 the SQLShowInfo modsql directive...

proftpd -- format string vulnerabilities

The ProFTPD release notes states: sean found two format string vulnerabilities, one in modsql's SQLShowInfo directive, and one involving the 'ftpshut' utility. Both can be considered low risk, as they require active involvement on the part of the site administrator in order to be exploited. These...

CVE-2000-1236

Oracle IAS 3.0.7 and earlier are affected by a SQL injection in the mod_sql component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the URL’s query string. The connected Nessus entry confirms this CVE-2000-1236 detail as part of Oracle Application Server multi-v...

CVE-2000-1236: Undefined Security Weakness

SQL injection vulnerability in modsql in Oracle Internet Application Server IAS 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL...