1607 matches found
[slackware-security] proftpd
New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/proftpd-1.3.3d-i486-1slack13.1.txz: Upgraded. This update fixes an unbounded copy operation in...
ProFTPD < 1.3.3d 'mod_sql' Buffer Overflow
The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host is earlier than 1.3.3d. Such versions are reportedly affected by a heap-based buffer overflow vulnerability in the function 'sqlpreparewhere' in the...
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
Metasploit Framework v3.5.1 Updated Version Download !
Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit version 3.5.1! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits for a...
ProFTPD controlled source packages Backdoor security vulnerabilities and fixes-vulnerability warning-the black bar safety net
Affected version: ProFTPD Project ProFTPD 1.3. x ProFTPD is an open source FTP service program. ProFTPD specific period version is to insert the back door code, a remote attacker can use this Backdoor unauthorized access toFTP serveraccess to the control system. This issue affects the project's...
Preemptive Protection against ProFTPD FTP Server TELNET_AIC Stack Buffer Overflow
A buffer overflow vulnerability was reported in ProFTPD FTP Server, a full featured File Transfer Protocol FTP server mainly used in Linux distributions. The vulnerability is due to insufficient validation of user input. Remote attackers could exploit this vulnerability by sending a crafted FTP...
ProFTPD受控制源软件包后门安全漏洞
ProFTPD是一款开放源代码FTP服务程序。 ProFTPD的特定时期版本被插入了后门代码，远程攻击者可利用这些后门非授权获取对FTP服务器的访问，从而控制系统。 此问题影响项目的主FTP服务器和所有镜像服务器发布的被攻击的ProFTPD 1.3.3c源代码包，此代码包中包含允许远程root权限访问的后门。2010年11月28日至12月2日期间下载的源代码受此问题影响。 ProFTPD Project ProFTPD 1.3.x 厂商补丁： ProFTPD Project --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
ftp-proftpd-backdoor NSE Script
Tests for the presence of the ProFTPD 1.3.3c backdoor reported as BID 45150. This script attempts to exploit the backdoor using the innocuous id command by default, but that can be changed with the ftp-proftpd-backdoor.cmd script argument. Script Arguments ftp-proftpd-backdoor.cmd Command to...
GNU glibc - regcomp() Stack Exhaustion Denial of Service
GNU glibc - regcomp Stack Exhaustion Denial of Service // source: https://www.securityfocus.com/bid/45233/info GNU glibc is prone to a denial-of-service vulnerability due to stack exhaustion. Successful exploits will allow attackers to make the affected computer unresponsive, denying service to...
GNU glibc - 'regcomp()' Stack Exhaustion Denial of Service
// source: https://www.securityfocus.com/bid/45233/info GNU glibc is prone to a denial-of-service vulnerability due to stack exhaustion. Successful exploits will allow attackers to make the affected computer unresponsive, denying service to legitimate users. This issue affects unknown versions of...
ProFTPD Compromised Source Packages Trojaned Distribution
The remote host is using ProFTPD, a free FTP server for Unix and Linux. The version of ProFTPD installed on the remote host has been compiled with a backdoor in 'src/help.c', apparently related to a compromise of the main distribution server for the ProFTPD project on the 28th of November 2010...
FreeBSD : proftpd -- Compromised source packages backdoor (ed7fa1b4-ff59-11df-9759-080027284eaa)
The ProFTPD Project team reports : The security issue is caused due to the distribution of compromised ProFTPD 1.3.3c source code packages via the project's main FTP server and all of the mirror servers, which contain a backdoor allowing remote root access. %NASLMINLEVEL 70300 C Tenable Network...
Preemptive Protection against ProFTPD with mod_sql pre-authentication Vulnerability
A pre-authentication remote root heap overflow vulnerability was reported in the ProFTPD FTP Server. ProFTPD is a configurable GPL-licensed FTP server software...
Week in Security: Wikileaks Extravaganza, New Ransomware and Open-Source Attacks
It was difficult to go anywhere this week without hearing about the flurry of activity surrounding the Wikileaks data dump. A slew of denial-of-service attacks followed soon after, while new ransomware and attacks on open-source software filled out the rest of the week’s news. Read on for the wee...
ProFTPD 1.3.3c Trojan Source Code
== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...
ProFTPD-1.3.3c Backdoor Command Execution
$Id: proftpd133cbackdoor.rb 11210 2010-12-02 22:33:37Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ProFTPD 1.3.3c compromised source remote root Trojan
Exploit for php platform in category remote exploits ==================================================== ProFTPD 1.3.3c compromised source remote root Trojan ==================================================== == ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC...
ProFTPd-1.3.3c - Backdoor Command Execution (Metasploit)
$Id: proftpd133cbackdoor.rb 11214 2010-12-03 12:34:38Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ProFTPD-1.3.3c Backdoor Command Execution
This module exploits a malicious backdoor that was added to the ProFTPD download archive. This backdoor was present in the proftpd-1.3.3c.tar.bz2|gz archive between November 28th 2010 and 2nd December 2010. This module requires Metasploit: https://metasploit.com/download Current source:...
ProFTPD Server Backdoored
The main server used to distribute the open-source ProFTPD software was compromised over the weekend through the use of a bug in the FTP software itself, and a backdoored version of the software was uploaded and distributed for several days as a result. Because of the compromise, the backdoored...