GLSA-200702-02 : ProFTPD: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200702-02 ProFTPD: Local privilege escalation A flaw exists in the modctrls module of ProFTPD, normally used to allow FTP server administrators to configure the daemon at runtime. Impact : An FTP server administrator permitted to...

ProFTPD: Local privilege escalation

Background ProFTPD is a powerful, configurable, and free FTP daemon. Description A flaw exists in the modctrls module of ProFTPD, normally used to allow FTP server administrators to configure the daemon at runtime. Impact An FTP server administrator permitted to interact with modctrls could...

[SECURITY] [DSA 1245-1] New proftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1245-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 7th, 2006 http://www.debian.org/security/faq -...

DSA-1245-1 proftpd

Bulletin has no description...

FreeBSD : proftpd -- remote code execution vulnerabilities (3f851b22-89fb-11db-a937-003048116330)

The proftpd development team reports that several remote buffer overflows had been found in the proftpd server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

CVE-2005-4816

Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password...

CVE-2005-4816

The CVE-2005-4816 issue affects ProFTPD: a buffer/ programming error in the Radius addon module (mod_radius) can be triggered by a long password, leading to remote denial of service and potential arbitrary code execution. Public sources enumerate affected behavior and versions: vulnerable before ...

CVE-2005-4816

Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password...

CVE-2005-4816: Undefined Security Weakness

Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password...

ProFTPD Controls模块本地缓冲区溢出漏洞

ProFTPD是一款流行的FTP服务程序。 ProFTPD Controls模块存在缓冲区溢出问题，本地攻击者可以利用漏洞提升特权获得ROOT权限。 问题存在于"Controls"模块中，这个是ProFTPD服务器的选项功能，必须在配置文件中激活。Controls是用于与独立运行的ProFTPD守护程序通信的模块。提供管理器实时更改守护进程行为而不需要重新启动守护程序的方法。问题代码在src/ctrls.c中的prctrlsrecvrequest函数中： ---------------------------------------------------- Code from...

CVE-2006-6563

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

DEBIAN-CVE-2006-6563

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

CVE-2006-6563

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

CVE-2006-6563

ProFTPD is affected by a local, stack-based buffer overflow in the mod_ctrls component. The vulnerability resides in the pr_ctrls_recv_request function (ctrls.c) of ProFTPD before 1.3.1rc1, where handling of a large reqarglen length value can allow a local attacker to execute arbitrary code. Affe...

CVE-2006-6563

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

CVE-2006-6563

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

CVE-2006-6563: Undefined Security Weakness

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

ProFTPd 1.3.0a - mod_ctrls support Local Buffer Overflow (PoC)

ProFTPd 1.3.0a - modctrls support Local Buffer Overflow PoC Core Security Technologies - Corelabs Advisory ProFTPD Controls buffer overflow import socket import os, os.path,stat This works with default proftpd 1.3.0a compiled with gcc 4.1.2 ubuntu edgy ctrlSocket = "/tmp/ctrls.sock" mySocket =...

ProFTPd 1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (PoC)

Core Security Technologies - Corelabs Advisory ProFTPD Controls buffer overflow import socket import os, os.path,stat This works with default proftpd 1.3.0a compiled with gcc 4.1.2 ubuntu edgy ctrlSocket = "/tmp/ctrls.sock" mySocket = "/tmp/notused.sock" canary = "\0\0\x0a\xff" trampoline =...

ProFTPD <= 1.3.0a (mod_ctrls support) Local Buffer Overflow PoC

No description provided by source. Core Security Technologies - Corelabs Advisory ProFTPD Controls buffer overflow import socket import os, os.path,stat This works with default proftpd 1.3.0a compiled with gcc 4.1.2 ubuntu edgy ctrlSocket = "/tmp/ctrls.sock" mySocket = "/tmp/notused.sock" canary ...