Mandrake Security Advisory MDVSA-2009:288 (proftpd)

The remote host is missing an update to proftpd announced via advisory MDVSA-2009:288. OpenVAS Vulnerability Test $Id: mdksa2009288.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:288 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:288 (proftpd)

The remote host is missing an update to proftpd announced via advisory MDVSA-2009:288. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

ProFTPD < 1.3.2b, 1.3.3 - 1.3.3.rc1 SSL Certificate Validation Bypass Vulnerability

ProFTPD is prone to a security bypass vulnerability because the application fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might b...

Mandriva Linux Security Advisory : proftpd (MDVSA-2009:288)

A vulnerability has been identified and corrected in proftpd : The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '' character in a domain name in the Subject Alternative Name field of an X.509 client...

ProFTPd 1.3.0 mod_ctrls Local Root Exploit

!/usr/bin/perl -w Exploit for the ProFTPd modctrls vulnerability. Stack Overflow in function int prctrlsrecvrequestprcrlsclt cl unchecked buffer for arguments of the module connects to the unix domain socket and sends a string that is longer than the buffer char512. Cheers to Alfredo "revenge"...

ProFTPd 1.3.0 mod_ctrls Local Stack Overflow (opensuse)

Exploit for unknown platform in category local exploits ======================================================= ProFTPd 1.3.0 modctrls Local Stack Overflow opensuse ======================================================= Title: ProFTPd 1.3.0 modctrls Local Stack Overflow opensuse CVE-ID: OSVDB-ID...

ProFTPd 1.3.0 (OpenSUSE) - mod_ctrls Local Stack Overflow

ProFTPd 1.3.0 OpenSUSE - modctrls Local Stack Overflow !/usr/bin/perl -w Exploit for the ProFTPd modctrls vulnerability. Stack Overflow in function int prctrlsrecvrequestprcrlsclt cl unchecked buffer for arguments of the module connects to the unix domain socket and sends a string that is longer...

ProFTPd 1.3.0 mod_ctrls Local Stack Overflow (opensuse)

No description provided by source. !/usr/bin/perl -w Exploit for the ProFTPd modctrls vulnerability. Stack Overflow in function int prctrlsrecvrequestprcrlsclt cl unchecked buffer for arguments of the module connects to the unix domain socket and sends a string that is longer than the buffer...

ProFTPD SReplace Function Buffer Overflow (CVE-2006-5815)

The ProFTPD server is a full featured File Transfer Protocol FTP server mainly used in Linux distributions. Aside from the standard FTP features, the server supports a number of extensions. There exists a buffer overflow vulnerability in ProFTPD FTP server. The vulnerability is due to improper...

ProFTPd 1.3.0 (OpenSUSE) - 'mod_ctrls' Local Stack Overflow

!/usr/bin/perl -w Exploit for the ProFTPd modctrls vulnerability. Stack Overflow in function int prctrlsrecvrequestprcrlsclt cl unchecked buffer for arguments of the module connects to the unix domain socket and sends a string that is longer than the buffer char512. Cheers to Alfredo "revenge"...

Fedora Core 10 FEDORA-2009-9386 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-9386. OpenVAS Vulnerability Test $Id: fcore20099386.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9386 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-9386 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-9386. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora 10 : proftpd-1.3.2a-5.fc10 (2009-9386)

This update has a large number of changes from previous Fedora packages; the highlights are as follows: - Update to upstream release 1.3.2a - Fix SQL injection vulnerability at login 485125, CVE-2009-0542 - Fix SELinux compatibility 498375 - Fix audit logging 506735 - Fix default configuration...

[SECURITY] Fedora 10 Update: proftpd-1.3.2a-5.fc10

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Fedora 10 : proftpd-1.3.1-8.fc10 (2009-0089)

This update fixes a security issue where an attacker could conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands. It also fixes some SSL shutdown issues seen with certain clients. Note that Tenable Network Security has extracted the preceding description block directl...

FreeBSD : ProFTPD ASCII translation bug resulting in remote root compromise (cf0fb426-3f96-11d8-b096-0020ed76ef5a)

A buffer overflow exists in the ProFTPD code that handles translation of newline characters during ASCII-mode file uploads. An attacker may exploit this buffer overflow by uploading a specially crafted file, resulting in code execution and ultimately a remote root compromise. %NASLMINLEVEL 70300 ...

FreeBSD : proftpd IP address access control list breakage (cb6c6c29-9c4f-11d8-9366-0020ed76ef5a)

Jindrich Makovicka reports a regression in proftpd's handling of IP address access control lists IP ACLs. Due to this regression, some IP ACLs are treated as allow all''. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Mandriva Linux Security Advisory : proftpd (MDVSA-2009:061)

multiple vulnerabilities has been identified and fixed in proftpd : ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI that...

Mandriva Update for proftpd MDKA-2007:089 (proftpd)

Check for the Version of proftpd OpenVAS Vulnerability Test Mandriva Update for proftpd MDKA-2007:089 proftpd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for proftpd MDKSA-2007:130 (proftpd)

Check for the Version of proftpd OpenVAS Vulnerability Test Mandriva Update for proftpd MDKSA-2007:130 proftpd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...