1608 matches found
ProFTPD 1.3.7a - Remote Denial of Service
Exploit Title: ProFTPD 1.3.7a - Remote Denial of Service Date: 22/03/2021 Exploit Author: xynmaps Vendor Homepage: http://www.proftpd.org/ Software Link: https://github.com/proftpd/proftpd Version: 1.3.7a Tested on: Parrot Security OS 5.9.0 ------------------------------- encoding=utf8 author =...
The vulnerability in the implementation of the alloc_pool function of the ProFTPD server allows a hacker to execute arbitrary code.
The vulnerability of the ProFTPD FTP-server’s allocpool function relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for Use After Free in Proftpd
CVE-2020-9273 These are the files I created during analysis a...
GLSA-202009-11 : ProFTPD: Denial of service
The remote host is affected by the vulnerability described in GLSA-202009-11 ProFTPD: Denial of service It was found that ProFTPD did not properly handle invalid SCP commands. Impact : An authenticated remote attacker could issue invalid SCP commands, possibly resulting in a Denial of Service...
ProFTPD: Denial of service
Background ProFTPD is an advanced and very configurable FTP server. Description It was found that ProFTPD did not properly handle invalid SCP commands. Impact An authenticated remote attacker could issue invalid SCP commands, possibly resulting in a Denial of Service condition. Workaround There i...
QNAP QTS Multiple ProFTPD Vulnerabilities
QNAP QTS is prone to multiple vulnerabilities in ProFTPD and other components. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SECURITY] [DLA 2338-2] proftpd-dfsg regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2338-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 25, 2020 https://wiki.debian.org/LTS -...
DLA-2338-2 proftpd-dfsg - regression update
Bulletin has no description...
Debian DLA-2338-2 : proftpd-dfsg regression update
The update of proftpd-dfsg released as DLA-2338-1 incorrectly destroyed the memory pool in function sftpkexhandle in contrib/modsftp/kex.c which may cause a segmentation fault and thus prevent sftp connections. For Debian 9 stretch, this problem has been fixed in version 1.3.5e+r1.3.5b-4+deb9u2. ...
Debian: Security Advisory (DLA-2338-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2338-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2338-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 22, 2020 https://wiki.debian.org/LTS -...
DLA-2338-1 proftpd-dfsg - security update
Bulletin has no description...
GLSA-202003-35 : ProFTPd: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202003-35 ProFTPd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ProFTPd. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by interrupting the data transfer...
ProFTPd: Multiple vulnerabilities
Background ProFTPD is an advanced and very configurable FTP server. Description Multiple vulnerabilities have been discovered in ProFTPd. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by interrupting the data transfer channel, could possibly execute...
MGASA-2020-0120 Updated proftpd packages fix security vulnerability
Updated proftpd packages fix security vulnerability: Antonio Morales discovered an use-after-free flaw in the memory pool allocator in ProFTPD. Interrupting current data transfers can corrupt the ProFTPD memory pool, leading to denial of service, or potentially the execution of arbitrary code...
Updated proftpd packages fix security vulnerability
Updated proftpd packages fix security vulnerability: Antonio Morales discovered an use-after-free flaw in the memory pool allocator in ProFTPD. Interrupting current data transfers can corrupt the ProFTPD memory pool, leading to denial of service, or potentially the execution of arbitrary code...
[SECURITY] [DLA 2115-2] proftpd-dfsg regression update
Package : proftpd-dfsg Version : 1.3.5e+r1.3.5-2+deb8u7 CVE ID : CVE-2020-9273 It was discovered that there was a regression in a previous fix for a use-after-free vulnerability in the proftpd-dfsg FTP server. Exploitation of the original vulnerability within the memory pool handling could have...
openSUSE Security Update : proftpd (openSUSE-2020-273)
This update for proftpd fixes the following issues : proftpd was updated to version 1.3.6c. Security issues fixed : - CVE-2020-9272: Fixed an out-of-bounds read in modcap bsc1164572. - CVE-2020-9273: Fixed a potential memory corruption caused by an interruption of the data transfer channel...
openSUSE: Security Advisory for proftpd (openSUSE-SU-2020:0273-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...