Lucene search
+L

1607 matches found

Prion
Prion
added 2013/01/24 9:55 p.m.38 views

Race condition

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

1.2CVSS6.6AI score0.00693EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2013/01/24 9:55 p.m.33 views

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

1.2CVSS6AI score0.00693EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2013/01/24 9:0 p.m.61 views

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

6AI score0.00693EPSS
SaveExploits0References5
CVE
CVE
added 2013/01/24 9:0 p.m.844 views

CVE-2012-6095

CVE-2012-6095 affects ProFTPD prior to 1.3.5rc1. When using the UserOwner directive, a race condition with a symlink attack on the MKD or XMKD commands lets a local user modify ownership of arbitrary files. The vulnerability arises from insecure handling of temporary files during directory creati...

1.2CVSS6.1AI score0.00693EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2013/01/24 9:0 p.m.57 views

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the 1 MKD or 2 XMKD commands...

1.2CVSS6.1AI score0.00693EPSS
SaveExploits0
securityvulns
securityvulns
added 2013/01/14 12:0 a.m.88 views

[SECURITY] [DSA 2606-1] proftpd-dfsg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2606-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2013 http://www.debian.org/security/faq -...

1.2CVSS1.9AI score0.00693EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/01/14 12:0 a.m.36 views

Debian DSA-2606-1 : proftpd-dfsg - symlink race

It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

1.2CVSS5.1AI score0.00693EPSS
SaveExploits0References4
securityvulns
securityvulns
added 2013/01/14 12:0 a.m.63 views

ProFTPd symbolic links vulnerability

No description provided...

1.2CVSS1.3AI score0.00693EPSS
SaveExploits0References1Affected Software1
Debian
Debian
added 2013/01/13 8:35 p.m.74 views

[SECURITY] [DSA 2606-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2606-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2013 http://www.debian.org/security/faq -...

1.2CVSS5.4AI score0.00693EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2013/01/13 12:0 a.m.33 views

Debian Security Advisory DSA 2606-1 (proftpd-dfsg - symlink race)

It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. OpenVAS Vulnerability Test $Id: deb2606.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generate...

1.2CVSS0.1AI score0.00693EPSS
SaveExploits0References1
OSV
OSV
added 2013/01/13 12:0 a.m.27 views

DSA-2606-1 proftpd-dfsg - symlink race

Bulletin has no description...

1.2CVSS6AI score0.00693EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2013/01/12 12:0 a.m.11 views

Debian: Security Advisory (DSA-2606-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

1.2CVSS6.7AI score0.00693EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.8 views

Slackware Advisory SSA:2010-357-02 proftpd

The remote host is missing an update as announced via advisory SSA:2010-357-02. OpenVAS Vulnerability Test $Id: esoftslkssa201035702.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.26 views

Slackware Advisory SSA:2010-090-01 openssl

The remote host is missing an update as announced via advisory SSA:2010-090-01. OpenVAS Vulnerability Test $Id: esoftslkssa201009001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

5CVSS6.9AI score0.2035EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.20 views

Slackware Advisory SSA:2006-335-02 proftpd

The remote host is missing an update as announced via advisory SSA:2006-335-02. OpenVAS Vulnerability Test $Id: esoftslkssa200633502.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

10CVSS0.8AI score0.73663EPSS
SaveExploits6
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.10 views

Slackware Advisory SSA:2003-259-02 ProFTPD Security Advisory

The remote host is missing an update as announced via advisory SSA:2003-259-02. OpenVAS Vulnerability Test $Id: esoftslkssa200325902.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.41 views

Slackware Advisory SSA:2010-305-03 proftpd

The remote host is missing an update as announced via advisory SSA:2010-305-03. OpenVAS Vulnerability Test $Id: esoftslkssa201030503.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

7.1CVSS0.8AI score0.07502EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.29 views

Slackware Advisory SSA:2011-095-01 proftpd

The remote host is missing an update as announced via advisory SSA:2011-095-01. OpenVAS Vulnerability Test $Id: esoftslkssa201109501.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

5CVSS0.6AI score0.28068EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.34 views

Slackware: Security Advisory (SSA:2010-305-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.4AI score0.07502EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.12 views

Slackware: Security Advisory (SSA:2010-357-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder