[Full-disclosure] ssh.com ssh-3.2.9.1 sftp server remote off by one

ssh.com ssh-3.2.9.1 sftp server remote off by one ATTENTIONThis has not been tested under reallife conditions ssh-3.2.9.1 which is available from http://ftp.ssh.com/pub/ssh/ contains the same old rootd off by one bug as described bei isec.pl here:...

NetSievben SSH library SFTP DoS

SFTP file descriptors leak...

Buffer overflow

Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7sshsftp.cpp in NetSieben SSH Library ne7ssh before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service crash or possibly execute arbitrary code via multiple file transfers, related to multiple open file handle...

CVE-2007-1654

Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7sshsftp.cpp in NetSieben SSH Library ne7ssh before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service crash or possibly execute arbitrary code via multiple file transfers, related to multiple open file handle...

PT-2007-3035 · Netsieben · Netsieben Ssh Library

Name of the Vulnerable Software and Affected Versions: NetSieben SSH Library ne7ssh versions prior to 1.2.1 Description: The issue is related to a buffer overflow in the Ne7sshSftp::addOpenHandle function, which can be triggered by user-assisted remote SFTP servers. This can cause a denial of...

CVE-2007-1654

The CVE-2007-1654 entry maps to NetSieben SSH Library (ne7ssh) before version 1.2.1, where a buffer overflow in Ne7sshSftp::addOpenHandle (ne7ssh_sftp.cpp) can be triggered by user‑assisted remote SFTP servers during multiple file transfers (put/get), leading to a denial of service (crash) and po...

CVE-2007-1654

Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7sshsftp.cpp in NetSieben SSH Library ne7ssh before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service crash or possibly execute arbitrary code via multiple file transfers, related to multiple open file handle...

GLSA-200703-13 : SSH Communications Security's Secure Shell Server: SFTP privilege escalation

The remote host is affected by the vulnerability described in GLSA-200703-13 SSH Communications Security's Secure Shell Server: SFTP privilege escalation The SSH Secure Shell Server contains a format string vulnerability in the SFTP code that handles file transfers scp2 and sftp2. In some...

SSH Communications Security's Secure Shell Server: SFTP privilege escalation

Background The SSH Secure Shell Server from SSH Communications Security www.ssh.com is a commercial SSH implementation available free for non-commercial use. Description The SSH Secure Shell Server contains a format string vulnerability in the SFTP code that handles file transfers scp2 and sftp2...

Heap overflow

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit Transmit.app up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL...

CVE-2007-0020

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit Transmit.app up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL...

EUVD-2007-0024

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit Transmit.app up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL...

CVE-2007-0020

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit Transmit.app up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL...

CVE-2007-0020

CVE-2007-0020 affects Panic Transmit (Transmit.app) via the SFTP protocol handler. The flaw is a heap-based buffer overflow that can be triggered by a long ftps:// URL, impacting Transmit.app up to version 3.5.5. This allows remote attackers to attempt arbitrary code execution. The connected docu...

Transmit “sftp://” URI处理器堆溢出漏洞

Transmit是MAC OS X平台上的FTP客户程序，可以执行基本的FTP操作。 Transmit在处理sftp:// URI时存在堆溢出漏洞，远程攻击者可以通过构造超长字符串来触发这个溢出，导致执行任意指令，可能控制用户机器。 Panic Transmit 3.5.5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.panic.com/transmit/index.html !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"...

MOAB-19-01-2007: Transmit.app ftps:// URL Handler Heap Buffer Overflow

Summary Transmit 3 takes Mac OS X FTP to the next level by making file management easy. You can copy files to or from a server with drag and drop simplicity, or edit HTML code directly on a web server. You can even Preview graphic files on the fly with Transmit. Transmit can speak to most any...

OpenSSH 4.4 is available

OpenSSH 4.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100 complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community...

CVE-2006-1175

The WeOnlyDo! SFTP wodSFTP ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page...

CVE-2006-1175

The WeOnlyDo! SFTP wodSFTP ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page...

CVE-2006-1175

The wodSFTP ActiveX control from WeOnlyDo! is marked as safe for scripting, enabling a remote attacker to read and write files on the local system via a crafted web page or HTML email. Affected component: wodSFTP ActiveX control used by Windows applications; root cause: unsafe exposure of file op...