Fedora 11 : proftpd-1.3.2c-1.fc11 (2009-13236)

This update addresses CVE-2009-3555 SSL/TLS renegotiation vulnerability, mitigating the problem by refusing all client-initiated SSL/TLS session renegotiations. This update to the latest maintenance release also fixes a number of bugs recorded in the proftpd bug tracker: - SSL/TLS renegotiation...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Command injection

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service server crash via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command...

CVE-2009-3655

Rhino Software Serv-U versions 7.0.0.1 through 8.2.0.3 are documented to allow remote denial-of-service (server crash) through the FTP command sequence involving SITE SET TRANSFERPROGRESS ON. This is described in multiple sources (e.g., NVD and OpenVAS plugins) as a DoS vulnerability affecting Se...

CVE-2009-3655: Undefined Security Weakness

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service server crash via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command...

Apache < 2.2.14 Multiple Vulnerabilities

Binary data 5196.prm...

CVE-2009-3095

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Apache Httpd < 2.2.14 : mod_proxy_ftp FTP command injection

A flaw was found in the modproxyftp module. In a reverse proxy configuration, a remote attacker could use this flaw to bypass intended access restrictions by creating a carefully-crafted HTTP Authorization header, allowing the attacker to send arbitrary commands to the FTP server...

Cerberus FTP 3.0.1 (ALLO) Remote Overflow DoS Exploit (meta)

Exploit for unknown platform in category dos / poc ============================================================ Cerberus FTP 3.0.1 ALLO Remote Overflow DoS Exploit meta ============================================================ Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Perception LiteServe 'USER' FTP命令远程缓冲区溢出漏洞

BUGTRAQ ID: 33158 CNCAN ID：CNCAN-2009010808 Perception LiteServe是一款FTP服务程序。 Perception LiteServe不正确处理'USER' FTP命令，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交包含超长字符串的'USER'命令，可触发缓冲区溢出，造成服务崩溃，或者以应用程序权限执行任意指令。 Perception LiteServe 2.2 Perception LiteServe 2.0.1 Perception LiteServe 2.0 2 Perception LiteServe 2.0...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

Debian Security Advisory DSA 1222-1 (proftpd)

The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...

Debian Security Advisory DSA 1222-1 (proftpd)

The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...

CVE-2007-6146: Improper Input Validation

Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service service stop via a "specific file" argument to an FTP command...

[SECURITY] [DSA 1296-1] New php4 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1296-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 21st, 2007 http://www.debian.org/security/faq -...

php CRLF injection

CRLF injection vulnerability in the ftpputcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands...

Stack overflow

Multiple stack-based buffer overflows in High Performance Anonymous FTP Server hpaftpd 1.01 allow remote attackers to execute arbitrary code via long arguments to the 1 USER, 2 PASS, 3 CWD, 4 MKD, 5 RMD, 6 DELE, 7 RNFR, or 8 RNTO FTP command...

CVE-2007-1731

CVE-2007-1731 affects High Performance Anonymous FTP Server (hpaftpd) 1.01. The vulnerability arises from multiple stack-based buffer overflows when processing long arguments to the FTP commands: USER, PASS, CWD, MKD, RMD, DELE, RNFR, and RNTO. This could allow remote attackers to execute arbitra...