43 matches found
CVE-2019-17320
NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename...
Buffer overflow
NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename...
CVE-2019-17320
NetSarang XFTP Client 6.0149 and earlier has a buffer overflow vulnerability caused by improper boundary checks when copying a filename from an attacker-controlled FTP server, allowing arbitrary code execution. Affected product: XFTP Client; root cause: boundary check failure in filename handling...
CVE-2019-17320
NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename...
CVE-2010-20122
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/xftpclientpwd.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
NetSarang Xftp 5 Backdoor Trojan (ShadowPad)
The Xftp 5, an FTP client for Windows, installed on the remote host has a nssock2.dll file identified by its MD5 hash that is infected with a trojan backdoor. The affected file includes an encrypted payload that could be remotely activated by a knowledgeable attacker. C Tenable Network Security,...
CNNVD on the United States Netsarang company multi software the presence of malicious code briefings-vulnerability warning-the black bar safety net
Recently, the national information security vulnerabilities library CNNVD received about the the United States Netsarang company more software there malicious code in case the message send. The company Xshell And Xmanager remote connection use of the product nssock2.dll module in the presence of...
Backdoor in the nssock2.dll module of several products including NetSarang Xmanager and Xshell
NetSarang is a company that provides secure link solutions and Xshell is a terminal emulation software. The related nssock2.dll module, a component used for network communication, in the installation directories of Xshell, Xlpd, Xmanager, and Xftp has been found to contain backdoor-type code samp...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the xftp package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Xftp < 3.0 Build 242 LIST Response Buffer Overflow
The version of Xftp, an FTP client for Windows, installed on the remote host is older than 3.0 Build 242. Such versions are reportedly affected by a buffer overflow vulnerability. By tricking a user into double-clicking on a file name included in the 'LIST' command response from a malicious FTP...
XFTP 3.0 Build 02.39 Long Filename Buffer Overflow
!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...
XFTP 3.0 Build 0239 Long filename Buffer Overflow
Exploit for windows platform in category remote exploits ================================================= XFTP 3.0 Build 0239 Long filename Buffer Overflow ================================================= !/usr/bin/python import socket import sys """...
XFTP 3.0 Build 0239 - Filename Remote Buffer Overflow
XFTP 3.0 Build 0239 - Filename Remote Buffer Overflow !/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// //...
XFTP 3.0 Build 0239 - 'Filename' Remote Buffer Overflow
!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...
Xftp FTP Client 3.0 - PWD Remote Buffer Overflow (Metasploit)
$Id: xftpclientpwd.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
NetSarang Xftp 3.0 PWD响应栈溢出漏洞
BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...
Xftp FTP Client 3.0 PWD Remote Buffer Overflow
This module exploits a buffer overflow in the Xftp 3.0 FTP client that is triggered through an excessively long PWD message. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xftp FTP Client 3.0...
Xftp client 3.0 PWD Remote Exploit
Exploit for windows platform in category remote exploits ================================== Xftp client 3.0 PWD Remote Exploit ================================== Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link:...
Xftp client 3.0 - 'PWD' Remote Overflow
Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link: http://www.netsarang.com/download/downxft3.html Version: Xftp 3.0 build 0238 Tested on: Windows XP SP3 Usage: ./xftpexploit The BOF occurs when sending an overly long PWD response. EDB Testing Notes...
