Debian DSA-416-1 : fsp - buffer overflow, directory traversal

A vulnerability was discovered in fsp, client utilities for File Service Protocol FSP, whereby a remote user could both escape from the FSP root directory CAN-2003-1022, and also overflow a fixed-length buffer to execute arbitrary code CAN-2004-0011. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2004-0011

CVE-2004-0011 concerns a buffer overflow in fsp (File Service Protocol client utilities) prior to version 2.81.b18, enabling remote code execution. The issue affects the fsp component and is repeatedly referenced in Debian (DSA-416), FreeBSD/ VuXML entries, and OpenVAS advisories, which document ...

CVE-2003-1022

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...

CVE-2003-1022

CVE-2003-1022: FSP Suite daemon directory traversal vulnerability. The FSP client/server allowed remote access to files outside the FSP root due to improper filtering of paths (trailing slash or leading slash). Affects FSP Suite prior to 2.81.b18; impact is partial confidentiality/integrity/avail...

CVE-2003-1022

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...

CVE-2004-0011

Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code...

[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

DSA-416 fsp - buffer overflow, directory traversal

Bulletin has no description...

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

CVE-1999-1411

The vulnerability CVE-1999-1411 affects the fsp package 2.71-10 on Debian GNU/Linux 2.0. During installation, an anonymous FTP user is added without administrator notification, which could automatically enable anonymous FTP on servers such as wu-ftp. Impact described as enabling anonymous FTP acc...

CVE-1999-0649

This CVE entry is rejected/not used per the description.

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...