ProFTPd with mod_mysql Authentication Bypass Vulnerability

Exploit for multiple platform in category remote exploits ========================================================== ProFTPd with modmysql Authentication Bypass Vulnerability ========================================================== Just found out a problem with proftpd's sql authentication. The...

ProFTPD字符编码SQL注入漏洞

ProFTPD是一款流行的FTP服务程序。 ProFTPD存在漏洞，允许恶意用户进行SQL注入攻击。 在执行SQL查询之前应用程序不正确设置字符编码，在使用多字节字符编码的环境中通过注入任意SQL代码可操作SQL查询。 要成功利用漏洞需要NLS支持。 ProFTPD 1.3.x 厂商解决方案 升级到ProFTPD 1.3.2: http://www.proftpd.org...

proftpd -- multiple sql injection vulnerabilities

Secunia reports: Some vulnerabilities have been reported in ProFTPD, which can be exploited by malicious people to conduct SQL injection attacks. The application improperly sets the character encoding prior to performing SQL queries. This can be exploited to manipulate SQL queries by injecting...

Fedora 8 : proftpd-1.3.1-8.fc8 (2009-0195)

This update fixes a security issue where an attacker could conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands. It also fixes some SSL shutdown issues seen with certain clients. Note that Tenable Network Security has extracted the preceding description block directl...

Fedora 9 : proftpd-1.3.1-8.fc9 (2009-0064)

This update fixes a security issue where an attacker could conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands. It also fixes some SSL shutdown issues seen with certain clients. Note that Tenable Network Security has extracted the preceding description block directl...

[SECURITY] Fedora 8 Update: proftpd-1.3.1-8.fc8

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 10 Update: proftpd-1.3.1-8.fc10

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 9 Update: proftpd-1.3.1-8.fc9

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Fedora Core 8 FEDORA-2009-0195 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0195. OpenVAS Vulnerability Test $Id: fcore20090195.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0195 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-0089 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0089. OpenVAS Vulnerability Test $Id: fcore20090089.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0089 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-0064 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0064. OpenVAS Vulnerability Test $Id: fcore20090064.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0064 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-0089 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0089. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 8 FEDORA-2009-0195 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0195. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 9 FEDORA-2009-0064 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0064. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Debian Security Advisory DSA 1689-1 (proftpd-dfsg)

The remote host is missing an update to proftpd-dfsg announced via advisory DSA 1689-1. OpenVAS Vulnerability Test $Id: deb16891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1689-1 proftpd-dfsg Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Debian: Security Advisory (DSA-1689-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1689-1 : proftpd-dfsg - missing input validation

Maksymilian Arciemowicz of securityreason.com reported that ProFTPD is vulnerable to cross-site request forgery CSRF attacks and executes arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1689-1] New proftpd-dfsg packages fix Cross-Site Request Forgery

-------------------------------------------------------------------------- Debian Security Advisory DSA 1689-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2008 http://www.debian.org/security/faq -...

DSA-1689-1 proftpd-dfsg - Cross-Site Request Forgery

Bulletin has no description...

auth-owners NSE Script

Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. Example Usage nmap -sV -sC Script Output 21/tcp open ftp ProFTPD 1.3.1 | auth-owners: nobody 22/tcp open ssh...