1886 matches found
CVE-2011-1137
Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...
Debian DSA-2185-1 : proftpd-dfsg - integer overflow
It was discovered that an integer overflow in the SFTP file transfer module of the ProFTPD daemon could lead to denial of service. The oldstable distribution lenny is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
ProFTPD integer overflow
Integer overflow in SFTP module...
[SECURITY] [DSA 2185-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2185-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 07, 2011 http://www.debian.org/security/faq -...
DSA-2185-1 proftpd-dfsg - integer overflow
Bulletin has no description...
Code injection
The 1 remoteglob function in sftp-glob.c and the 2 processput function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob...
CVE-2010-4755
The 1 remoteglob function in sftp-glob.c and the 2 processput function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob...
Fedora 13 : proftpd-1.3.3d-1.fc13 (2011-0613)
This is an update to the current upstream maintenance release, which addresses a security issue that could affect users of the modsql module not enabled by default. - A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the...
Fedora 14 : proftpd-1.3.3d-1.fc14 (2011-0610)
This is an update to the current upstream maintenance release, which addresses a security issue that could affect users of the modsql module not enabled by default. - A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the...
[SECURITY] Fedora 14 Update: bareftp-0.3.7-1.fc14
bareFTP is a file transfer client supporting the FTP, FTP over SSL/TLS FTP S and SSH File Transfer Protocol SFTP. It is written in C, targeting the M ono framework and the GNOME desktop environment. bareFTP is free and open source software released under the terms of the GPL license...
Serv-U < 10.3.0.1 SFTP Authentication Bypass
According to its banner, the installed version of Serv-U is earlier than 10.3.0.1 and is, therefore, potentially affected by the following issue : - If the SFTP server has been configured to only allow public key authentication, it can be bypassed for users accounts that have no password. C Tenab...
Serv-U < 10.3.0.1 SFTP Server Authentication Bypass Vulnerability
Binary data 5712.prm...
CVE-2010-2695
Xlight FTP Server 3.x is affected by a directory traversal vulnerability in the SFTP/SSH2 virtual server. Versions 3.5.0 and 3.5.5 (and possibly others) before 3.6 allow remote authenticated users to read, overwrite, or delete arbitrary files by crafting .. sequences in commands such as ls, rm, r...
XLight FTP Server 3.x SFTP Directory Traversal
According to its SSH banner, the version of XLight FTP server listening on the remote host is potentially affected by a directory traversal vulnerability in its SFTP service. A remote, authenticated attacker, exploiting this flaw, can read and modify arbitrary files on the remote host. Note that...
XLight FTP Server SFTP Directory Traversal
Binary data 5593.prm...
Xlight FTPd Multiple Directory Traversal in SFTP
No description provided by source. Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, ...
Xlight FTP Server 3.5.5 Directory Traversal
Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get...
GoodTech SSH Server SFTP Processing Buffer Overflow (CVE-2008-4726)
There exists a buffer overflow vulnerability in GoodTech SSH Server. The vulnerability is due to a boundary error while handling SFTP commands. A remote attacker can exploit this vulnerability by sending crafted SFTP commands to the target server, potentially causing arbitrary code to be injected...
Xlight FTPd Multiple Directory Traversal in SFTP
Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get...