CVE-2008-4242

CVE-2008-4242 concerns ProFTPD 1.3.1, where the server interprets long commands from an FTP client as multiple commands. This enables remote attackers to perform CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI that reuses an existing browser/FTP client session. Connected rec...

CVE-2008-4242

ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web...

Gentoo Security Advisory GLSA 200702-02 (proftpd)

The remote host is missing updates announced in advisory GLSA 200702-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. VID 0f51f2c9-8956-11dd-a6fe-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 0f51f2c9-8956-11dd-a6fe-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

ProFTPD超长命令处理安全漏洞

BUGTRAQ ID: 31289 CNCAN ID：CNCAN-2008092314 ProFTPD是一款FTP服务程序。 ProFTPD存在跨站请求伪造攻击，远程攻击者可以利用漏洞其他用户权限执行任意FTP命令。 应用程序截断超长FTP命令并不正确解析剩余的字符串作为新的FTP命令，攻击者构建恶意的链接，诱使用户访问，可导致以其他用户上下文在目标服务器上执行任意FTP命令。 ProFTPD Project ProFTPD 1.3.1 可参考ProFTPD提供的CVS库获得补丁信息： http://www.proftpd.org/ OpenBSD可参考如下补丁程序：...

Gentoo Security Advisory GLSA 200611-26 (proftpd)

The remote host is missing updates announced in advisory GLSA 200611-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Gentoo Security Advisory GLSA 200405-09 (proftpd)

The remote host is missing updates announced in advisory GLSA 200405-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200405-09 (proftpd)

The remote host is missing updates announced in advisory GLSA 200405-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200508-02 (proftpd)

The remote host is missing updates announced in advisory GLSA 200508-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200508-02 (proftpd)

The remote host is missing updates announced in advisory GLSA 200508-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200702-02 (proftpd)

The remote host is missing updates announced in advisory GLSA 200702-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200611-26 (proftpd)

The remote host is missing updates announced in advisory GLSA 200611-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : proftpd -- Long Command Processing Vulnerability (0f51f2c9-8956-11dd-a6fe-0030843d3802)

Secunia reports : The vulnerability is caused due to the application truncating an overly long FTP command, and improperly interpreting the remainder string as a new FTP command. This can be exploited to execute arbitrary FTP commands with the privileges of another user by e.g. tricking the user...

ProFTPD Command Truncation Cross-Site Request Forgery

The remote host is using ProFTPD, a free FTP server for Unix and Linux. The version of ProFTPD running on the remote host splits an overly long FTP command into a series of shorter ones and executes each in turn. If an attacker can trick a ProFTPD administrator into accessing a specially-formatte...

ProFTPD Command Truncation Cross-Site Request Forgery

Binary data 4687.prm...

proftpd -- Long Command Processing Vulnerability

Secunia reports: The vulnerability is caused due to the application truncating an overly long FTP command, and improperly interpreting the remainder string as a new FTP command. This can be exploited to execute arbitrary FTP commands with the privileges of another user by e.g. tricking the user...

FreeBSD Ports: proftpd

The remote host is missing an update to the system as announced in the referenced advisory. VID cf0fb426-3f96-11d8-b096-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: proftpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...