CVE-2011-0418

The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service memory consumption via a crafted FTP STAT command...

WinTFTP Server Pro v3.1 (0day) Remote Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ======================================================================= WinTFTP Server Pro v3.1 0day Remote Directory Traversal Vulnerability ======================================================================= / / / / / // | / // \ | / ...

SmallFTPD v1.0.3 Remote Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ========================================================= SmallFTPD v1.0.3 Remote Directory Traversal Vulnerability ========================================================= Pr0T3cT10n -=M.o.B.=- TheLeader Sro Contact: email protected...

CVE-2009-5012

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session...

Sun Solaris in.ftpd服务超长命令处理跨站请求伪造漏洞

BUGTRAQ ID: 40320 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris操作系统所使用的in.ftpd服务在将用户所提交的超长FTP命令拆分为多个命令时存在跨站请求伪造漏洞。如果再结合SITE CHMOD命令更改文件权限，攻击者就可以以管理权限执行任意FTP命令。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris 2009.06 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

TurboFTP 'DELE' FTP Command Remote Buffer Overflow Vulnerability

TurboFTP is prone to a remote buffer-overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TurboFTP 'DELE' FTP Command Remote Buffer Overflow Vulnerability

TurboFTP is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. TurboFTP 1.00.712 is vulnerable; prior versions may also ...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Fedora 11 : proftpd-1.3.2c-1.fc11 (2009-13236)

This update addresses CVE-2009-3555 SSL/TLS renegotiation vulnerability, mitigating the problem by refusing all client-initiated SSL/TLS session renegotiations. This update to the latest maintenance release also fixes a number of bugs recorded in the proftpd bug tracker: - SSL/TLS renegotiation...

Fedora 12 : proftpd-1.3.2c-1.fc12 (2009-13250)

This update addresses CVE-2009-3555 SSL/TLS renegotiation vulnerability, mitigating the problem by refusing all client-initiated SSL/TLS session renegotiations. This update to the latest maintenance release also fixes a number of bugs recorded in the proftpd bug tracker: - SSL/TLS renegotiation...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Command injection

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service server crash via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command...

CVE-2009-3655

Rhino Software Serv-U versions 7.0.0.1 through 8.2.0.3 are documented to allow remote denial-of-service (server crash) through the FTP command sequence involving SITE SET TRANSFERPROGRESS ON. This is described in multiple sources (e.g., NVD and OpenVAS plugins) as a DoS vulnerability affecting Se...

Apache < 2.2.14 Multiple Vulnerabilities

Binary data 5196.prm...

CVE-2009-3095

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Apache Httpd < 2.2.14 : mod_proxy_ftp FTP command injection

A flaw was found in the modproxyftp module. In a reverse proxy configuration, a remote attacker could use this flaw to bypass intended access restrictions by creating a carefully-crafted HTTP Authorization header, allowing the attacker to send arbitrary commands to the FTP server...

Cerberus FTP 3.0.1 (ALLO) Remote Overflow DoS Exploit (meta)

Exploit for unknown platform in category dos / poc ============================================================ Cerberus FTP 3.0.1 ALLO Remote Overflow DoS Exploit meta ============================================================ Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Perception LiteServe 'USER' FTP命令远程缓冲区溢出漏洞

BUGTRAQ ID: 33158 CNCAN ID：CNCAN-2009010808 Perception LiteServe是一款FTP服务程序。 Perception LiteServe不正确处理'USER' FTP命令，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交包含超长字符串的'USER'命令，可触发缓冲区溢出，造成服务崩溃，或者以应用程序权限执行任意指令。 Perception LiteServe 2.2 Perception LiteServe 2.0.1 Perception LiteServe 2.0 2 Perception LiteServe 2.0...