Lucene search
+L

1740 matches found

Prion
Prion
•added 2013/01/24 9:55 p.m.•44 views

Race condition

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

1.2CVSS6.6AI score0.00693EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2013/01/24 9:00 p.m.•64 views

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

1.2CVSS6.1AI score0.00693EPSS
SaveExploits0
Cvelist
Cvelist
•added 2013/01/24 9:00 p.m.•70 views

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

6AI score0.00693EPSS
SaveExploits0References5
CVE
CVE
•added 2013/01/24 9:00 p.m.•873 views

CVE-2012-6095

CVE-2012-6095 affects ProFTPD prior to 1.3.5rc1. When using the UserOwner directive, a race condition with a symlink attack on the MKD or XMKD commands lets a local user modify ownership of arbitrary files. The vulnerability arises from insecure handling of temporary files during directory creati...

1.2CVSS6.1AI score0.00693EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/01/24 12:00 a.m.•4 views

CVE-2012-6095: Concurrent Execution using Shared Resource with Improper Synchronization

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

1.2CVSS5.8AI score0.00693EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2013/01/14 12:00 a.m.•68 views

ProFTPd symbolic links vulnerability

No description provided...

1.2CVSS1.3AI score0.00693EPSS
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2013/01/14 12:00 a.m.•102 views

[SECURITY] [DSA 2606-1] proftpd-dfsg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2606-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2013 http://www.debian.org/security/faq -...

1.2CVSS1.9AI score0.00693EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/01/14 12:00 a.m.•39 views

Debian DSA-2606-1 : proftpd-dfsg - symlink race

It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

1.2CVSS5.1AI score0.00693EPSS
SaveExploits0References4
Debian
Debian
•added 2013/01/13 8:35 p.m.•90 views

[SECURITY] [DSA 2606-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2606-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2013 http://www.debian.org/security/faq -...

1.2CVSS5.4AI score0.00693EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2013/01/13 12:00 a.m.•38 views

Debian Security Advisory DSA 2606-1 (proftpd-dfsg - symlink race)

It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. OpenVAS Vulnerability Test $Id: deb2606.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generate...

1.2CVSS0.1AI score0.00693EPSS
SaveExploits0References1
OSV
OSV
•added 2013/01/13 12:00 a.m.•31 views

DSA-2606-1 proftpd-dfsg - symlink race

Bulletin has no description...

1.2CVSS6AI score0.00693EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2013/01/12 12:00 a.m.•18 views

Debian: Security Advisory (DSA-2606-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

1.2CVSS6.7AI score0.00693EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2012/09/11 12:00 a.m.•10 views

Slackware Advisory SSA:2010-357-02 proftpd

The remote host is missing an update as announced via advisory SSA:2010-357-02. OpenVAS Vulnerability Test $Id: esoftslkssa201035702.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/09/11 12:00 a.m.•36 views

Slackware Advisory SSA:2011-095-01 proftpd

The remote host is missing an update as announced via advisory SSA:2011-095-01. OpenVAS Vulnerability Test $Id: esoftslkssa201109501.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

5CVSS0.6AI score0.28068EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2012/09/11 12:00 a.m.•17 views

Slackware Advisory SSA:2003-259-02 ProFTPD Security Advisory

The remote host is missing an update as announced via advisory SSA:2003-259-02. OpenVAS Vulnerability Test $Id: esoftslkssa200325902.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/09/11 12:00 a.m.•32 views

Slackware Advisory SSA:2010-090-01 openssl

The remote host is missing an update as announced via advisory SSA:2010-090-01. OpenVAS Vulnerability Test $Id: esoftslkssa201009001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

5CVSS6.9AI score0.2035EPSS
SaveExploits5
OpenVAS
OpenVAS
•added 2012/09/11 12:00 a.m.•44 views

Slackware Advisory SSA:2010-305-03 proftpd

The remote host is missing an update as announced via advisory SSA:2010-305-03. OpenVAS Vulnerability Test $Id: esoftslkssa201030503.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

7.1CVSS6AI score0.07563EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2012/09/11 12:00 a.m.•27 views

Slackware Advisory SSA:2006-335-02 proftpd

The remote host is missing an update as announced via advisory SSA:2006-335-02. OpenVAS Vulnerability Test $Id: esoftslkssa200633502.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

10CVSS0.8AI score0.75487EPSS
SaveExploits6
OpenVAS
OpenVAS
•added 2012/09/10 12:00 a.m.•47 views

Slackware: Security Advisory (SSA:2012-041-04)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS6.4AI score0.12625EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2012/09/10 12:00 a.m.•35 views

Slackware: Security Advisory (SSA:2006-335-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.5AI score0.75487EPSS
SaveExploits6References2
Rows per page
Query Builder