W3Filer Banner处理远程缓冲区溢出漏洞

BUGTRAQ ID: 24709 W3Filer是一款小型的文件下载工具。 W3Filer在处理超长的Banner返回数据时存在漏洞，远程攻击者可能利用漏洞导致工具崩溃。 如果W3Filer客户端在试图发送文件时接收了很大的banner，就会触发缓冲区溢出，导致僵死，用户必须杀掉进程；或应用程序会立即崩溃。 Satyavrat Mehrotra W3Filer 2.1.3 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.smehrsoft.com/ / W3Filer Buffer Overflow...

Elxis CMS <= 2006.4 - banner module - sql injection

Elxis Content Management System Banner Mod SQL Injection Jun 14 2007 ------------------------------------------------------------------------------- Product Elxis Content Management System Vulnerable Versions All versions to 2006.4 of the Elxis CMS. Vendor Status The Vendor was notified and the...

Ace-FTP FTP client buffer overflow

Buffer overflow on parsing server banner...

[Full-disclosure] Extending JavaScript Portscanning to Include Banner Grabbing

There's a new paper/advisory at: http://bindshell.net/papers/ftppasv Here's a quick summary: A common implementation flaw in FTP clients allows FTP servers to cause clients to connect to other hosts. This seemly small vulnerability has some interesting consequences for web browser security namely...

SmartFTP超长Banner信息远程堆溢出漏洞

SmartFTP是一款FTP 客户端工具，使用与资源管理器类似的操作界面。 SmartFTP在处理FTP服务器的banner回复时存在堆溢出漏洞，远程恶意FTP服务器可能利用此漏洞控制用户机器。 如果服务器向客户端返回了超过4000字节的超长Banner回复的话就可能触发这个溢出，导致执行任意指令。 SmartFTP SmartFTP 2.0.1002 SmartFTP -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.smartftp.com/...

CVE-2007-0790

Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner...

CVE-2007-0790: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner...

ebp2x-rfi.txt

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...

Remote file inclusion

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

CVE-2007-0178 describes a PHP remote file inclusion vulnerability in Easy Banner Pro 2.8’s info.php, exploitable via the s[phppath] parameter to execute arbitrary PHP code on the server. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector and low complexity, resulting...

CVE-2007-0178: Undefined Security Weakness

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

Easy Banner Pro Version 2.8 <= Remote File Inclusion

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...

Easy Banner Pro 2.8 - info.php Remote File Inclusion

Easy Banner Pro 2.8 - info.php Remote File Inclusion source: https://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Easy Banner Pro 2.8 - 'info.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

PHP Web Scripts Easy Banner Functions.PHP远程文件包含漏洞

PHP Web Scripts Easy Banner是一款基于PHP的web应用程序。 PHP Web Scripts Easy Banner不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Functions.PHP'脚本对用户提交的'sphppath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 PHP Web Scripts Easy Banner Free 目前没有详细解决方案提供，请关注以下链接：...

CVE-2006-6397

Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner is not setuid, an exploit would not cross privilege boundaries in normal operations. This issue is...

CVE-2006-6397

The CVE-2006-6397 entry concerns an alleged integer overflow in the banner/banner.c component across FreeBSD, NetBSD, and OpenBSD. The issue is disputed by CVE and others and, because the banner is not setuid, an exploit would not cross privilege boundaries in normal operations; the notes explici...

CVE-2006-6397: Undefined Security Weakness

Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner is not setuid, an exploit would not cross privilege boundaries in normal operations. This issue is...