Blackmoon Banking Trojan Using New Infection Technique

New clues have surfaced on how the Blackmoon banking Trojan is infecting its victims using a new framework to deliver the malware. “We noticed recent campaigns two weeks ago where Blackmoon had shifted its infection strategy and is now utilizing a unique and interesting technique,” said Hardik...

New HTTPS URL Leakage Attack Leaves PCs, Macs, Linux Systems Vulnerable

LAS VEGAS — Researchers have found flaws in the Web Proxy AutoDiscovery protocol tied to DHCP and DNS servers that allow hackers spy on HTTPS-protected URLs and launch a myriad of different malicious attacks against Linux, Windows or Mac computers. According to the security firm SafeBreach, this...

Blackmoon FTP PORT Command Denial Of Service Vulnerability

Blackmoon FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0507

FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 3.1.7.1736, and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service crash via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of the...

Null pointer dereference

FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 3.1.7.1736, and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service crash via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of the...

CVE-2011-0507

The CVE-2011-0507 issue affects BlackMoon FTP Server. A remote attacker can cause a denial of service (crash) by sending a large number of PORT commands with long arguments, triggering a NULL pointer dereference. Affected versions include BlackMoon FTP Server 3.1 Build 1735/1736 and potentially e...

BlackMoon FTP Server Denial of Service

According to its self-reported version number, the remote FTP server is running a version of BlackMoon FTP Server earlier than 3.1.8. Such versions reportedly are affected by a denial of service vulnerability. By sending an overly long PORT command, a remote, unauthenticated attacker may be able ...

Blackmoon FTP 3.1 Build 17351736 - Denial of Service

Blackmoon FTP 3.1 Build 17351736 - Denial of Service !/usr/bin/python Exploit Title: BlackmoonFTP Server DOS Date: 12/28/2010 Author: Craig Freyman cd1zz Software Link: http://www.mediafire.com/?bnc4d00myymmx55 Version: 3.1 Release 6 - Build 1735 and 1736 Tested On: Windows XP SP3 Vendor Contacte...

Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service

!/usr/bin/python Exploit Title: BlackmoonFTP Server DOS Date: 12/28/2010 Author: Craig Freyman cd1zz Software Link: http://www.mediafire.com/?bnc4d00myymmx55 Version: 3.1 Release 6 - Build 1735 and 1736 Tested On: Windows XP SP3 Vendor Contacted: 12/28/2010 Vendor Fixed: 1/13/2011 import socket...

BlackMoon FTP Server blackmoon.mdb Plaintext Password Disclosure

BlackMoon FTP server is installed on the remote host. FTP usernames and passwords are stored on the server in plaintext in a filed called 'blackmoon.mdb.' Any user with an account on this host may read the credentials stored in this file, and use them to connect to this FTP server. C Tenable...

BlackMoon FTP Login Error Message User Enumeration

The version of BlackMoon FTP running on the remote host issues a special error message when a user attempts to log in using a nonexistent account. An attacker may use this flaw to make a list of valid accounts, which can be used to mount further attacks. C Tenable Network Security, Inc. ref:...

CVE-2003-0342

Summary: CVE-2003-0342 affects BlackMoon FTP Server 2.6 Free Edition (and possibly other distributions). Affected component is the blackmoon.mdb database where usernames and passwords are stored in plaintext. The underlying issue enables local users who have an account on the host to read credent...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition (and possibly other versions) returns an "Account does not exist" message when an invalid username is provided, enabling an attacker to enumerate valid accounts and, as a consequence, facilitate brute‑force login attempts. The Nessus plugin confirms the enume...

CVE-2003-0342

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...

[[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration

Telhack 026 Inc. Security Advisory - 4 Name: Blackmoon FTP Server 2.6 Free Edition Impact: Medium Date: May 21 / 2003 Daniel Nystrm a.k.a. excE [email protected] I N F O BlackMoon FTP Server is an FTP daemon written specifically for Windows 2000/XP and above. It takes advantage of all the new...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...

CVE-2003-0342

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...

CVE-2002-0126

Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...

CVE-2002-0126

CVE-2002-0126 : Buffer overflow in BlackMoon FTP Server 1.0–1.5 allows remote code execution via a long argument to (1) USER, (2) PASS, or (3) CWD. Affected software is BlackMoon FTP Server; underlying cause is overflow in handling overly long commands/arguments. Impact per the entry is remote ar...