6457 matches found
AIX 5.3 TL 10 : ftpd (IZ83274)
There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow...
Cerberus FTP Server < 5.0.4.0 SSH DES Cipher Weakness
The version of Cerberus FTP server on the remote host is earlier than 5.0.4.0. Such versions reportedly support the DES cipher for SSH sessions. This can create more favorable conditions for brute-force attacks on the encrypted network traffic. C Tenable Network Security, Inc. include'compat.inc'...
Cerberus FTP Server < 5.0.5.0 Cross-Site Request Forgery
The version of Cerberus FTP server on the remote host is earlier than 5.0.5.0. As such, it is potentially affected by a cross-site request forgery CSRF vulnerability that can be used to trick an authenticated administrator into making unintended changes to the application. C Tenable Network...
Cerberus FTP Server < 5.0.6.0 Multiple XSS
The version of Cerberus FTP server on the remote host is earlier than 5.0.6.0. As such, it is potentially affected by the following cross- site scripting vulnerabilities : - The user-supplied input for fields under administration 'Messages' tab are not validated before being returned to the user....
Debian DSA-2606-1 : proftpd-dfsg - symlink race
It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]
Overview =============== Cerberus FTP Server http://www.cerberusftp.com/ is a secure and reliable FTP server with many features and available functionality. It was discovered that the Web Administration interface has multiple persistent Cross Site Scripting XSS vulnerabilities. In the log viewer...
Cerberus FTP Server crossite scripting
Crossite scripting in administration interface...
CVE-2012-6339
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
CVE-2012-6339
Cerberus FTP Server has multiple XSS vulnerabilities in the Web Administration interface (log viewer and servermanager commands) affecting versions before 5.0.6.0. An attacker could inject arbitrary web script/HTML through log entries in the Log Manager or through a Messages field in servermanage...
CVE-2012-6339
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209)
An arbitrary PHP code execution vulnerability has been reported in Horde FTP server...
Freefloat FTP Server - 'USER' Remote Buffer Overflow
Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested on Windows XP SP3 with Ubuntu 12.04 !/usr/bin/python import socket,sys,time,os import Tkinter,tkMessageBox...
FreeFloat FTP Server Buffer Overflow
Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested on Windows XP SP3 with Ubuntu 12.04 !/usr/bin/python import socket,sys,time,os import Tkinter,tkMessageBox...
Freefloat FTP Server - USER Remote Buffer Overflow
Freefloat FTP Server - USER Remote Buffer Overflow Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested on Windows XP SP3 with Ubuntu 12.04 !/usr/bin/python import...
FreeFloat FTP Server Arbitrary File Upload
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "FreeFloat FTP...
FreeFloat FTP Server Arbitrary File Upload Vulnerability
This Metasploit module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just lo...
Free Float FTP Server Remote Command Execution USER Command Buffer Overflow
This time the exploit is free because there is many similar exploits and this is just an extension with also GUI.. Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested ...
FreeFloat FTP Server Arbitrary File Upload
This module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and...
Wing FTP Server Multiple ZIP Commands Parsing Remote DoS
The remote FTP server is running a version of Wing FTP Server earlier than 4.1.1. As such, it is reportedly affected by an authenticated denial of service attack triggered when parsing multiple ZIP commands. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62976;...