FreeBSD : fsp buffer overflow and directory traversal vulnerabilities (20be2982-4aae-11d8-96f2-0020ed76ef5a)

The Debian security team reported a pair of vulnerabilities in fsp : A vulnerability was discovered in fsp, client utilities for File Service Protocol FSP, whereby a remote user could both escape from the FSP root directory CAN-2003-1022, and also overflow a fixed-length buffer to execute arbitra...

Debian Security Advisory DSA 416-1 (fsp)

The remote host is missing an update to fsp announced via advisory DSA 416-1. OpenVAS Vulnerability Test $Id: deb4161.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 416-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-416)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FSP Suite Directory Traversal Vulnerability

The FSP Suite daemon has been found to improperly filter out paths with trailing / or starting with /. This would allow an attacker access to files that reside outside the bounding FSP root directory. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...

Detect FSP Compatible Hosts

The remote host is running a FSP File Service Protocol compatible product. FSP is a protocol designed to serve file on top of the UDP protocol. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Debian DSA-416-1 : fsp - buffer overflow, directory traversal

A vulnerability was discovered in fsp, client utilities for File Service Protocol FSP, whereby a remote user could both escape from the FSP root directory CAN-2003-1022, and also overflow a fixed-length buffer to execute arbitrary code CAN-2004-0011. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2004-0011

CVE-2004-0011 concerns a buffer overflow in fsp (File Service Protocol client utilities) prior to version 2.81.b18, enabling remote code execution. The issue affects the fsp component and is repeatedly referenced in Debian (DSA-416), FreeBSD/ VuXML entries, and OpenVAS advisories, which document ...

CVE-2003-1022

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...

CVE-2003-1022

CVE-2003-1022: FSP Suite daemon directory traversal vulnerability. The FSP client/server allowed remote access to files outside the FSP root due to improper filtering of paths (trailing slash or leading slash). Affects FSP Suite prior to 2.81.b18; impact is partial confidentiality/integrity/avail...

CVE-2003-1022

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...

CVE-2004-0011

Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code...

[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

DSA-416 fsp - buffer overflow, directory traversal

Bulletin has no description...

CVE-1999-1411

The vulnerability CVE-1999-1411 affects the fsp package 2.71-10 on Debian GNU/Linux 2.0. During installation, an anonymous FTP user is added without administrator notification, which could automatically enable anonymous FTP on servers such as wu-ftp. Impact described as enabling anonymous FTP acc...

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

CVE-1999-0649

This CVE entry is rejected/not used per the description.

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...