264 matches found
Wing FTP Server <= 4.3.8 Authenticated Command Execution Vulnerability
Wing FTP Server is prone to an authenticated command execution vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wing FTP Server Authenticated Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::CmdStager include Msf::Exploit::Remote::HttpClient def...
Wing FTP Server - (Authenticated) Command Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wing FTP Server Authenticated Command Execution', 'Description' = %q This module exploits the embedded Lua interpreter in the admin w...
Wing FTP Server Authenticated Command Execution Exploit
This Metasploit module exploits the embedded Lua interpreter in the admin web interface for versions 4.3.8 and below. When supplying a specially crafted HTTP POST request an attacker can use os.execute to execute arbitrary system commands on the target with SYSTEM privileges. This module requires...
Wing FTP Server Authenticated Command Execution
This module exploits the embedded Lua interpreter in the admin web interface for versions 3.0.0 and above. When supplying a specially crafted HTTP POST request an attacker can use os.execute to execute arbitrary system commands on the target with SYSTEM privileges. This module requires Metasploit...
Wing FTP Server Authenticated Command Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wing FTP Server Authenticated Command Execution', 'Description' = %q This module exploits the embedded Lua interpreter in the admin w...
Wing FTP Rush insufficient certificate validation
SSL certificate is not validated...
FTP Rush: missing X.509 validation (FTP with TLS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2014-002 Product: FTP Rush Vendor: Wing FTP Software Affected Versions: v2.1.8 Tested Versions: v2.1.8 Windows 7 32 bit and Windows 8.1 64 bit Vulnerability Type: X.509 validation Risk Level: Medium Solution Status: Vendor...
Wing FTP Server Multiple ZIP Commands Parsing Remote DoS
The remote FTP server is running a version of Wing FTP Server earlier than 4.1.1. As such, it is reportedly affected by an authenticated denial of service attack triggered when parsing multiple ZIP commands. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62976;...
CVE-2012-4729
Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service daemon crash via two zip commands...
Command injection
Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service daemon crash via two zip commands...
CVE-2012-4729
Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service daemon crash via two zip commands...
CVE-2012-4729
Wing FTP Server prior to 4.1.1 is vulnerable to an authenticated denial-of-service caused by parsing two ZIP commands, leading to daemon crash. Affected: Wing FTP Server versions before 4.1.1. Root cause: vulnerability arises during processing of multiple ZIP commands. Mitigation: upgrade to vers...
Wing FTP Server 4.0.1之前版本信息泄露漏洞
Bugtraq ID: 50355 Wing FTP Server是一款FTP服务程序。 Wing FTP Server相关HTTP协议存在安全漏洞，允许恶意用户获得敏感信息。 Wing FTP Server 4.x 厂商解决方案 Wing FTP Server 4.0.1已经修复此漏洞，建议用户下载使用： http://www.wftpserver.com/...
Wing FTP Server SSH Public Key Authentication Bypass
The remote FTP server is running a version of Wing FTP Server earlier than 3.8.8. As such, it is reportedly affected by an authentication bypass vulnerability when SSH public key authentication is used. An attacker can exploit this issue by logging into the FTP server with a password even though...
Wing FTP Server "ssh public key"身份验证安全绕过漏洞
BUGTRAQ ID: 48335 Wing FTP服务器是安全的多协议文件服务器FTP, HTTP, FTPS, HTTPS, SFTP，适用于Windows, Linux, Mac OSX和Solaris。 Wing FTP服务器在SSH身份验证的实现上存在安全漏洞，恶意用户可利用此漏洞绕过某些安全限制。 此漏洞源于SSH身份验证机制中的错误，在限制到仅公钥身份验证时，可不顾配置的限制使用密码登录 wftpserve Wing FTP Server 3.8.7 wftpserve Wing FTP Server 3.8.6 wftpserve Wing FTP Server 3.8....
Wing FTP Server Detection
The remote host has an installation of Wing FTP server, which offers file transfer functionality over FTP, FTPS, and SFTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54955; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...
Wing FTP Server LDAP Authentication Bypass
The remote FTP server is running a version of Wing FTP Server earlier than 3.8.7. As such, it reportedly is affected by an authentication bypass vulnerability when LDAP or Active Directory authentication is used. An attacker can exploit this issue by logging into the FTP server with an empty...
Wing FTP Server SFTP Connection Unspecified DoS
The remote FTP server is running a version of Wing FTP Server earlier than 3.8.0. Such versions reportedly are affected by a denial of service vulnerability that can be triggered when handling SFTP connections. A remote, unauthenticated attacker may be able to leverage this issue to crash the...
Wing FTP Server < 3.6.6 HTTP Request DoS Vulnerability
Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...