Lucene search
+L

224 matches found

OpenVAS
OpenVAS
added 2011/05/23 12:0 a.m.35 views

Mandriva Update for pure-ftpd MDVSA-2011:094 (pure-ftpd)

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Mandriva Update for pure-ftpd MDVSA-2011:094 pure-ftpd Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

4CVSS6.4AI score0.07255EPSS
Exploits5References2
securityvulns
securityvulns
added 2011/05/21 12:0 a.m.87 views

[ MDVSA-2011:094 ] pure-ftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:094 http://www.mandriva.com/security/ Package : pure-ftpd Date : May 19, 2011 Affected: 2009.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A denial-of-service DoS attack related to glo...

4CVSS6.1AI score0.07255EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2011/05/20 12:0 a.m.33 views

Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:094)

A denial-of-service DoS attack related to glob brace expansion was discovered and fixed in pure-ftpd CVE-2011-0418. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490 The...

4CVSS5.3AI score0.07255EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2011/05/13 12:0 a.m.105 views

openSUSE Security Update : pure-ftpd (openSUSE-SU-2011:0483-1)

Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

6.8CVSS8AI score0.33341EPSS
Exploits1References4
NVD
NVD
added 2011/04/18 5:55 p.m.17 views

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

4.4CVSS6.5AI score0.00344EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2011/04/18 5:55 p.m.27 views

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

4.4CVSS5.9AI score0.00344EPSS
Exploits0References1
Prion
Prion
added 2011/04/18 5:55 p.m.16 views

Code injection

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

4.4CVSS7.1AI score0.00344EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2011/04/18 5:0 p.m.62 views

CVE-2011-0988

CVE-2011-0988 affects pure-ftpd 1.0.22 as deployed in SUSE SLES 10 SP3/SP4 and SUSE ED 10 SP3/SP4 when running OES Netware extensions. It creates a world-writable directory that local users could exploit to overwrite arbitrary files and gain privileges via unspecified vectors. SUSE released secur...

4.4CVSS6.6AI score0.00344EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2011/04/18 5:0 p.m.25 views

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

6.4AI score0.00344EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2011/04/18 5:0 p.m.24 views

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

4.4CVSS6.4AI score0.00344EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/04/07 12:0 a.m.25 views

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7428)

pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch : - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. CVE-2011-0988 %NASLMINLEVEL 70300 ...

4.4CVSS5.4AI score0.00344EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2011/04/01 12:0 a.m.24 views

Fedora 14 : pure-ftpd-1.0.30-1.fc14 (2011-3349)

Wietse Venema and Victor Duchovni discovered and reported an issue that could lead to a potential information disclosure. An unencrypted FTP command immediately following STARTTLS request would get buffered and processed prior to SSL/TLS handshake, resulting in potential authentication bypass in...

6.8CVSS8.2AI score0.16334EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2011/04/01 12:0 a.m.28 views

Fedora Update for pure-ftpd FEDORA-2011-3349

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS9.3AI score0.16334EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/04/01 12:0 a.m.42 views

Fedora Update for pure-ftpd FEDORA-2011-3349

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Fedora Update for pure-ftpd FEDORA-2011-3349 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

6.8CVSS8.7AI score0.16334EPSS
Exploits1References2
FreeBSD
FreeBSD
added 2011/04/01 12:0 a.m.68 views

pureftpd -- multiple vulnerabilities

Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled -- Cf. CVE-2011-0418. Fix a STARTTLS flaw similar to Postfix's CVE-2011-0411. If you're using TLS, upgrading is recommended...

6.8CVSS1AI score0.16334EPSS
Exploits6
Tenable Nessus
Tenable Nessus
added 2011/03/18 12:0 a.m.29 views

Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:046)

A security flaw was discovered in pure-ftpd which allows plaintext command injection over TLS similar to CVE-2011-0411. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490...

6.8CVSS8AI score0.16334EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2009/10/10 12:0 a.m.24 views

SLES9: Security update for pure-ftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pure-ftpd More details may also be found by searching for keyword 5021146 within the SuSE Enterprise Server 9 patch database at...

Exploits0
OpenVAS
OpenVAS
added 2009/10/10 12:0 a.m.11 views

SLES9: Security update for pure-ftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pure-ftpd More details may also be found by searching for keyword 5021146 within the SuSE Enterprise Server 9 patch database linked in the references...

7.5AI score
Exploits0References1
seebug.org
seebug.org
added 2009/02/20 12:0 a.m.10 views

Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes

No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.12 views

Gentoo Security Advisory GLSA 200407-04 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 200407-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.2AI score0.02349EPSS
Exploits0References3
Rows per page
Query Builder