Sensitive Information Disclosure

Augeas is a utility for editing configuration. Augeas parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native configuration files. Augeas also uses "lenses" as basic building blocks...

Amazon Linux 2 : setup (ALAS-2019-1158)

Setup in Amazon Linux 2 added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pamshells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to...

Low: setup

Issue Overview: Setup in Amazon Linux 2 added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pamshells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell...

CVE-2017-8218

vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password...

CVE-2017-8218

CVE-2017-8218 affects TP-Link C2 and C20i routers running firmware up to 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n, where vsftpd exposes backdoor credentials (admin: 1234, guest: guest, test: test) allowing unauthorized access to FTP and potentially root access via related components. Connected s...

CVE-2017-8218

vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password...

TP-Link C2 and C20i Default Credential Design Vulnerability

TP-Link is a Chinese manufacturer of network equipment such as routers, IOT devices, and more. A default credential design vulnerability exists in the vsftpd FTP server of the TP-Link C2 and C20i. An attacker can exploit the vulnerability to execute the system command multiple times and run with...

In Python reconstructed vsFTPd Backdoor vulnerability-vulnerability warning-the black bar safety net

0×01 Preface Hello everyone, first of all to a statement of the purpose of this article is not to analyze the vsFTPd Backdoor vulnerability, I recently like to use the vulnerability to write the Trojan in the form of to practice a programming language, in this paper, we will re-use the Python to ...

vsftpd < 3.0.3 Security Bypass Vulnerability

vsftpd is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vsftpdproject:vsftpd";...

CentOS Update for kernel CESA-2016:1664 centos6

Check the version of kernel SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882547";...

RedHat Update for kernel RHSA-2016:1664-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : kernel (RHSA-2016:1664)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

vsftpd FTP Server Detection (FTP)

FTP based detection of vsftpd. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.111050";...

SUSE: Security Advisory for vsftpd (SUSE-SU-2015:0136-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2008-0295)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : vsftpd (SUSE-SU-2015:0136-1)

The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-RU-2015:0952-1 Recommended update for vsftpd

This update fixes regressions with using wildcards that had been introduced by the previous update bnc922538, bnc927612. Additionally, stat2 could be sometimes called on the wrong path, resulting incorrectly in ENOENT bnc925963...

SUSE-SU-2015:0417-1 Recommended update for vsftpd

This update fixes regressions with using wildcards that had been introduced by the previous update bnc922538, bnc927612. Additionally, stat2 could be sometimes called on the wrong path, resulting incorrectly in ENOENT bnc925963...