SurgeFTP Remote Command Execution Vulnerability

This Metasploit module exploits a flaw in the SurgeFTP server's web-based administrative console to execute arbitrary commands. require 'msf/core' class Metasploit3 'SurgeFTP Remote Command Execution', 'Description' = %q This module exploits a flaw in the SurgeFTP server's web-based administrativ...

Netwin SurgeFTP Remote Command Execution

This module exploits a vulnerability found in Netwin SurgeFTP, version 23c8 or prior. In order to execute commands via the FTP service, please note that you must have a valid credential to the web-based administrative console. Module Options msf use exploit/multi/http/netwin/surgeftpexec msf...

SurgeFTP Admin Multiple Reflected Cross-site Scripting Vulnerabilities

SurgeFTP Server is prone to multiple reflected cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SurgeFTP 23b6 - Multiple Cross-Site Scripting Vulnerabilities

SurgeFTP 23b6 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49160/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Surge-FTP 23b6 Cross Site Scripting

Exploit Title : Surge-FTP v23b6 Admin multiple reflected XSS Vulnerabilities Authored by : Houssam Sahli = backtronuxgmailcom Date : 16/08/2011 Vendor: NetWin Product web page: http://netwinsite.com download link : http://netwinsite.com/ftp/surgeftp/surgeftp23b6windows.exe Affected version: v23b6...

SurgeFTP 23b6 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49160/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

CVE-2010-1068

Multiple cross-site scripting XSS vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the 1 domainid or 2 classid parameter in a class action...

CVE-2010-1068

The CVE-2010-1068 entry describes multiple cross-site scripting (XSS) vulnerabilities in SurgeFTP 2.3a6, specifically in surgeftpmgr.cgi. The issue enables remote attackers to inject arbitrary web script or HTML via the domainid or classid parameters in a class action. Connected sources identify ...

CVE-2010-1068

Multiple cross-site scripting XSS vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the 1 domainid or 2 classid parameter in a class action...

CVE-2010-1068: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the 1 domainid or 2 classid parameter in a class action...

SurgeFTP 'surgeftpmgr.cgi' Multiple Cross Site Scripting Vulnerabilities

SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

SurgeFTP 2.x - 'surgeftpmgr.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37844/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in an administrator's browser session in the conte...

SurgeFTP 2.x - surgeftpmgr.cgi Multiple Cross-Site Scripting Vulnerabilities

SurgeFTP 2.x - surgeftpmgr.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37844/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

CVE-2008-1052

The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails...

CVE-2008-1052

The CVE-2008-1052 entry concerns NetWin SurgeFTP, specifically versions 2.3a2 and earlier. The issue is a remote denial of service: when an attacker sends a crafted large Content-Length HTTP header, memory exhaustion leads to a NULL pointer dereference and a daemon crash. The description does not...

CVE-2008-1052

The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails...

SurgeFTP FTP server DoS

Administration web interface Content-Length memory consumption...

SurgeFTP Content-Length参数空指针引用拒绝服务漏洞

BUGTRAQ ID: 27993 SurgeFTP是一款FTP服务程序，提供管理接口程序。 SurgeFTP的过程Web管理接口处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果客户端发送了Content-Length参数的话，SurgeFTP会试图根据这个字段所指定的数量分配内存（最多为2147483647字节），然后将数据拷贝到所生成的缓冲区。由于对分配结果缺少检查，如果无法分配所指定数量内存的话，就可能在拷贝期间触发空指针引用，导致整个服务器崩溃。 NetWin SurgeFTP = 2.3a2 厂商补丁： NetWin ------...

NULL pointer in SurgeFTP 2.3a2

Luigi Auriemma Application: SurgeFTP http://www.netwinsite.com/surgeftp/ Versions: = 2.3a2 Platforms: Windows, Linux and Solaris Bug: NULL pointer access Exploitation: remote Date: 25 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fi...

CVE-2008-1052: Improper Restriction of Operations within the Bounds of a Memory Buffer

The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails...