USN-1288-1: vsftpd vulnerability

It was discovered that the 2.6.35 and earlier Linux kernel does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption in applications that require a separate namespace per connectio...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : vsftpd vulnerability (USN-1288-1)

It was discovered that the 2.6.35 and earlier Linux kernel does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption in applications that require a separate namespace per connectio...

Debian Security Advisory DSA 2305-1 (vsftpd)

The remote host is missing an update to vsftpd announced via advisory DSA 2305-1. OpenVAS Vulnerability Test $Id: deb23051.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2305-1 vsftpd Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2305-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201110-07 : vsftpd: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201110-07 vsftpd: Denial of Service A Denial of Service vulnerability was discovered in vsftpd. Please review the CVE identifier referenced below for details. Impact : A remote authenticated attacker could cause a Denial of Servic...

DEBIAN-CVE-2011-2189

net/core/netnamespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption via requests to a daemon that requires a separate namespace...

CVE-2011-2189

net/core/netnamespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption via requests to a daemon that requires a separate namespace...

Design/Logic Flaw

net/core/netnamespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption via requests to a daemon that requires a separate namespace...

CVE-2011-2189

Summary (CVE-2011-2189): The Linux kernel (2.6.32 and earlier) has a flaw in net_namespace.c that mishandles a high rate of network-namespace creation/cleanup. This can allow remote attackers to cause a denial of service via memory consumption in a daemon that creates a separate namespace per con...

CVE-2011-2189

net/core/netnamespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption via requests to a daemon that requires a separate namespace...

vsftpd: Denial of service

Background vsftpd is a very secure FTP daemon written with speed, size and security in mind. Description A Denial of Service vulnerability was discovered in vsftpd. Please review the CVE identifier referenced below for details. Impact A remote authenticated attacker could cause a Denial of Servic...

Debian DSA-2305-1 : vsftpd - denial of service

Two security issue have been discovered that affect vsftpd, a lightweight, efficient FTP server written for security. - CVE-2011-2189 It was discovered that Linux kernels 2.6.35 are considerably slower in releasing than in the creation of network namespaces. As a result of this and because vsftpd...

[SECURITY] [DSA 2305-1] vsftpd security update

-------------------------------------------------------------------------- Debian Security Advisory DSA-2305-1 [email protected] http://www.debian.org/security/ Nico Golde September 19, 2011 http://www.debian.org/security/faq -...

DSA-2305-1 vsftpd - denial of service

Bulletin has no description...

CentOS Update for vsftpd CESA-2011:0337 centos5 i386

Check for the Version of vsftpd OpenVAS Vulnerability Test CentOS Update for vsftpd CESA-2011:0337 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for vsftpd CESA-2011:0337 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

vsftpd 2.3.4源程序软件包存在后门漏洞

BUGTRAQ ID: 48539 vsftpd是Very Secure FTP daemon的缩写，是UNIX类平台上安全的FTP服务器。 vsftpd 2.3.4版本被植入了后门代码，远程攻击者可利用这个问题控制受影响系统。 此漏洞源于通过项目主服务器发布的有后门的vsftpd 2.3.4源代码程序包 vsftpd-2.3.4.tar.gz。 Vsftpd 2.3.x 厂商补丁： Vsftpd ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://vsftpd.beasts.org/ Mathias Kresin （）提供了如下测试方法：...

VSFTPD v2.3.4 Backdoor Command Execution

No description provided by source. $Id: vsftpd234backdoor.rb 13099 2011-07-05 05:20:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

vsftpd Smiley Face Backdoor

The version of vsftpd running on the remote host has been compiled with a backdoor. Attempting to login with a username containing : a smiley face triggers the backdoor, which results in a shell listening on TCP port 6200. The shell stops listening after a client connects to and disconnects from...

Vsftpd FTP Server Download Site Compromised

Someone was able to compromise a version of the vsftpd secure FTP server recently, inserting a simple backdoor that gives the attacker a shell on compromised machines. The bad version of the server has been removed and the creator of the app has moved it to a different hosting provider as a...