FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key

FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key // source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in a...

FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key

// source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in an XML file or the Windows Registry. This can allow t...

LapFTP FTP client buffer overflow

Buffer overflow on .LSQ filees parsing...

Hummingbird FTP client weak encryption

Profiles are "encrypted" by XOR'ing with fixed byte value 0x7d...

DSA-762-1 affix - several

Bulletin has no description...

CVE-2005-2277

Affected software: Affix Bluetooth FTP client (BTFTP) used in Nokia Affix 2.1.2 and 3.2.0. Description: CVE-2005-2277 describes a vulnerability where missing input sanitising before executing shell commands allows a remote attacker to run arbitrary commands via shell metacharacters in the filenam...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2250

CVE-2005-2250 is a buffer overflow in Nokia Affix Bluetooth FTP client (BTFTP) affecting Affix versions 2.1.2 and 3.2.0, exploitable via a long filename in an OBEX file share to potentially execute arbitrary code. Debian/DSA-762-1 notes the issue as CAN-2005-2250 and CAN-2005-2277, with fixes pro...

CVE-2005-2250: Undefined Security Weakness

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

Moderate: Red Hat Security Advisory: gftp security update

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

CVE-2004-1682

The CVE-2004-1682 entry concerns the QNX 6.1 FTP client, where a format string vulnerability in the QUOTE command can allow remote authenticated users to obtain group bin privileges. The root cause is improper handling of format specifiers in QUOTE, enabling privilege escalation. The provided doc...

CVE-2004-1682

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

CVE-2004-1682: Undefined Security Weakness

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

gFTP FTP client directory traversal

Directory traversal during downloading file from server...

Debian DSA-686-1 : gftp - missing input sanitising

Albert Puigsech Galicia discovered a directory traversal vulnerability in a proprietary FTP client CAN-2004-1376 which is also present in gftp, a GTK+ FTP client. A malicious server could provide a specially crafted filename that could cause arbitrary files to be overwritten or created by the...

DSA-686-1 gftp - missing input sanitising

Bulletin has no description...

HP-UX PHNE_14479 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : ftp client interprets server provided filenames which can cause commands to be run on the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE14479. The text itself...

CVE-2003-1078

The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...

CVE-2003-1078

The CVE-2003-1078 entry concerns the FTP client for Solaris 2.6, 7, and 8. When the debug (-d) flag is enabled, the client displays the user password on the screen during login, revealing the password in cleartext. The available documents confirm the affected software and the login-password expos...