CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...

RHEL 3 / 4 : gaim (RHSA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

[Full-disclosure] NIC Chile CGI Script Zone Transfers

NIC Chile CGI Script Zone Transfers. Autor: Rodrigo Gutierrez rodrigo at intellicomp.cl Affected: All ".cl" domains which use NIC's Chile Secondary NS. Vendor url: http://www.nic.cl Rate: Critical Background. NIC Chile is a part of the University of Chile and is in charge of handling all the...

rssh & scponly -- arbitrary command execution

Jason Wies identified both rssh & scponly have a vulnerability that allows arbitrary command execution. He reports: The problem is compounded when you recognize that the main use of rssh and scponly is to allow file transfers, which in turn allows a malicious user to transfer and execute entire...

CVE-1999-1345

AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...

ISC BIND 8.2.2-P6 vulnerable to DoS via compressed zone transfer, aka the "zxfr bug"

Overview There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's ISC BIND software. This vulnerability is referred to by the ISC as the "zxfr bug." It affects ISC BIND version 8.2.2, patch levels 1 through 6. Description Using this vulnerability,...

CVE-1999-0532

CVE-1999-0532 denotes a DNS zone transfer disclosure. The provided connected docs confirm that a DNS server may allow AXFR zone transfers, enabling an attacker to enumerate zone data. Evidence includes references to a Metasploit DNS enumeration module and various scanners (OpenVAS, Nessus plugin)...

PT-1998-1008 · Isc · Bind

Name of the Vulnerable Software and Affected Versions: BIND versions 4.9 through 8 Description: The issue is related to Denial of Service vulnerabilities in BIND, which can be exploited via CNAME record and zone transfer. Recommendations: For BIND versions 4.9 through 8, update to a version that ...

CVE-1999-0532

A DNS server allows zone transfers...

PT-1997-1152

Name of the Vulnerable Software and Affected Versions DNS server affected versions not specified Description The issue concerns a DNS server that allows zone transfers. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...