Sysax Multi Server (SFTP module) Multiple Commands DoS Vulnerabilities

No description provided by source...

FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities

No description provided by source. Title: ====== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1041 VL-ID: ===== 1041 Common Vulnerability Scoring System:...

FTPGetter 3.58.0.21 - Buffer Overflow (PASV) Exploit

No description provided by source. !/usr/bin/python Exploit Title: FTPGetter v3.58.0.21 Buffer Overflow PASV Exploit Date: 02/03/2011 Author: modpr0be Software Link: http://www.ftpgetter.com/ftpgettersetup.exe Vulnerable version: = 3.58.0.21 Tested on: Windows XP SP3 VMware Player 3.1.3...

UltraEdit 14.00b - FTP/SFTP 'LIST' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29784/info UltraEdit is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the FTP/SFTP client. Exploiting this issue will allow a...

Cerberus FTP Server SFTP Username Enumeration

This module uses a dictionary to brute force valid usernames from Cerberus FTP server via SFTP. This issue affects all versions of the software older than 6.0.9.0 or 7.0.0.2 and is caused by a discrepancy in the way the SSH service handles failed logins for valid and invalid users. This issue was...

openSUSE Security Update : vlc (openSUSE-SU-2014:0315-1)

VLC was updated to version 2.1.3 bnc864422 : + Core : - Fix broken behaviour with SOCKSv5 proxies - Fix integer overflow on error when using vlcreaddir + Access : - Fix DVB-T2 tuning on Linux. - Fix encrypted DVD playback. - Fix v4l2 frequency conversion. + Decoders : - Fix numerous issues M2TS,...

openSUSE Security Update : proftpd (openSUSE-SU-2013:1563-1)

proftpd was updated to 1.3.4d. - Fixed broken build when using --disable-ipv6 configure option - Fixed modsql 'SQLAuthType Backend' MySQL issues - fix for bnc843444 CVE-2013-4359 - http://bugs.proftpd.org/showbug.cgi?id=3973 - add proftpd-sftp-kbdint-max-responses-bug3973.patch - Improve systemd...

openSUSE Security Update : filezilla (openSUSE-SU-2013:1347-1)

FileZilla was updated to version 3.7.3 to add various features, fix bugs and also security issues in the embedded putty ssh client. Full changelog: https://filezilla-project.org/changelog.php - Noteworthy changes : - Apply a fix for a security vulnerability in PuTTY as used in FileZilla to handle...

curl, libcurl security update

CentOS Errata and Security Advisory CESA-2014:0561 Updated curl packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System...

RHEL 6 : curl (RHSA-2014:0561)

Updated curl packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Scientific Linux Security Update : curl on SL6.x i386/x86_64 (20140527)

It was found that libcurl could incorrectly reuse existing connections for requests that should have used different or no authentication credentials, when using one of the following protocols: HTTPS with NTLM authentication, LDAPS, SCP, or SFTP. If an application using the libcurl library connect...

Accellion Secure File Transfer Code Execution

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Accellion Secure File Transfer SFTP Satellite Remote Root Code Execution PDF:...

SFTP Supported

The remote SSH service supports the SFTP subsystem. SFTP is a protocol for generalized file access, file transfer, and file management functionalities, typically over SSH. Note that valid credentials are required to determine if SFTP is supported and also that SFTP support can be enabled...

Anonymous SFTP Enabled

The remote SSH service supports anonymous SFTP logins. A remote user may connect and authenticate without providing unique credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72664; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2014/02/24 17:53:58 $";...

[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2013-0500

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of...

CVE-2013-0500

IBM Storwize V7000 Unified (1.3.0.0–1.4.1.1) is affected by CVE-2013-0500 due to a flaw in handling special files (character/block devices) created by NFS and later accessed via non‑NFS NAS protocols (CIFS, HTTPS, SCP, SFTP). An authenticated NAS user could read, modify, or manipulate configurati...

MGASA-2013-0295 Updated proftpd package fixes security vulnerability

A bug in ProFTPd's modsftp and modsftppam modules can be used to trigger a large heap allocation and exhaust all available system memory of the underlying operating system CVE-2013-4359...

[SECURITY] Fedora 18 Update: filezilla-3.7.3-1.fc18

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

Debian DSA-2767-1 : proftpd-dfsg - denial of service

Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...