6461 matches found
[SECURITY] Fedora 17 Update: proftpd-1.3.4b-5.fc17
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 16 Update: proftpd-1.3.4b-5.fc16
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 18 Update: proftpd-1.3.4b-5.fc18
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
AIX 5.3 TL 11 : ftpd (IZ83275)
There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow...
AIX 5.3 TL 10 : ftpd (IZ83274)
There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow...
Cerberus FTP Server < 5.0.5.0 Cross-Site Request Forgery
The version of Cerberus FTP server on the remote host is earlier than 5.0.5.0. As such, it is potentially affected by a cross-site request forgery CSRF vulnerability that can be used to trick an authenticated administrator into making unintended changes to the application. C Tenable Network...
Cerberus FTP Server < 5.0.4.0 SSH DES Cipher Weakness
The version of Cerberus FTP server on the remote host is earlier than 5.0.4.0. Such versions reportedly support the DES cipher for SSH sessions. This can create more favorable conditions for brute-force attacks on the encrypted network traffic. C Tenable Network Security, Inc. include'compat.inc'...
Cerberus FTP Server < 5.0.6.0 Multiple XSS
The version of Cerberus FTP server on the remote host is earlier than 5.0.6.0. As such, it is potentially affected by the following cross- site scripting vulnerabilities : - The user-supplied input for fields under administration 'Messages' tab are not validated before being returned to the user....
Debian DSA-2606-1 : proftpd-dfsg - symlink race
It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]
Overview =============== Cerberus FTP Server http://www.cerberusftp.com/ is a secure and reliable FTP server with many features and available functionality. It was discovered that the Web Administration interface has multiple persistent Cross Site Scripting XSS vulnerabilities. In the log viewer...
Cerberus FTP Server crossite scripting
Crossite scripting in administration interface...
CVE-2012-6339
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
CVE-2012-6339
Cerberus FTP Server has multiple XSS vulnerabilities in the Web Administration interface (log viewer and servermanager commands) affecting versions before 5.0.6.0. An attacker could inject arbitrary web script/HTML through log entries in the Log Manager or through a Messages field in servermanage...
CVE-2012-6339
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209)
An arbitrary PHP code execution vulnerability has been reported in Horde FTP server...
Freefloat FTP Server - 'USER' Remote Buffer Overflow
Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested on Windows XP SP3 with Ubuntu 12.04 !/usr/bin/python import socket,sys,time,os import Tkinter,tkMessageBox...
FreeFloat FTP Server Buffer Overflow
Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested on Windows XP SP3 with Ubuntu 12.04 !/usr/bin/python import socket,sys,time,os import Tkinter,tkMessageBox...
Freefloat FTP Server - USER Remote Buffer Overflow
Freefloat FTP Server - USER Remote Buffer Overflow Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow Date: 06/12/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.freefoat.com Tested on Windows XP SP3 with Ubuntu 12.04 !/usr/bin/python import...
FreeFloat FTP Server Arbitrary File Upload Vulnerability
This Metasploit module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just lo...