52 matches found
Remote code execution
An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...
Design/Logic Flaw
An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...
CVE-2022-34005
TitanFTP NextGen (before 1.2.1050) is affected by a remote code execution vulnerability due to a hardcoded sa password in the default Microsoft SQL Express 2019 instance installed during TitanFTP NextGen installation. The 1.2.1050 release fixes this issue for new installations, but not for upgrad...
CVE-2022-34005
An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...
CVE-2022-34006
Titan FTP Server NextGen (pre-1.2.1050) is affected by a flaw in the installation of Microsoft SQL Express 2019 where the SQL instance runs as SYSTEM with BUILTIN\Users as sysadmin. This configuration can allow an unprivileged Windows user to execute commands locally as NT AUTHORITY\SYSTEM (NX-I6...
South River Technologies TitanFTP NextGen 信任管理问题漏洞
South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen versions prior to 1.2.1050, which originates from ...
South River Technologies TitanFTP NextGen 安全漏洞
South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen prior to version 1.2.1050, which stems from...
TitanFTP directory traversal
xcrc and comb commands directory traversal...
TitanFTP Server Arbitrary File Disclosure
Accensus Security Advisory L-02 TitanFtp Server Arbitrary File Disclosure Details ============= Product: TitanFTP Server Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...
TitanFtp Server File Disclosure
Accensus Security Advisory L-02 TitanFtp Server Arbitrary File Disclosure Details ============= Product: TitanFTP Server Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...
TitanFTP Server Denial of Service Vulnerability
This host is running TitanFTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbtitanftpserverdosvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ TitanFTP Server Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...
TitanFTP Server < 6.26.631 DoS Vulnerability
TitanFTP Server is prone to a denial of service vulnerability. This VT was deprecated since it is a duplicate of Titan FTP Server 6.26.631 Remote DoS Vulnerability OID: 1.3.6.1.4.1.25623.1.0.900160. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...