Vulnerabilities fixed in libvirt

Suse has made updates available to fix vulnerabilities fixes in libvirt. The vulnerabilities allow a remote malicious person remotely capable of causing a denial-of-service DoS. -= SUSE =- SUSE has made updates available to fix the vulnerability fix the vulnerability in SUSE 15. You can install...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:1134-1)

This update for squid to version 4.11 fixes the following issues : CVE-2020-11945: Fixed a potential remote code execution vulnerability when using HTTP Digest Authentication bsc1170313. CVE-2019-12519, CVE-2019-12521: Fixed incorrect buffer handling that can result in cache poisoning, remote...

Denial of service vulnerability in wzdftpd-0.8.0 PORT type

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in the wzdftpd-0.8.0 PORT type that can be exploited by an attacker to cause a system crash...

Denial of service vulnerability in wzdftpd (CNVD-2020-28971)

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in wzdftpd, which can be exploited by an attacker to cause the server to deny service...

Denial of service vulnerability in wzdftpd (CNVD-2020-28972)

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in wzdftpd, which can be exploited by an attacker to cause the server to deny service...

FTPDMIN Buffer Overflow Vulnerability

FTPDMIN is a Windows-based FTP File Transfer Protocol server. A buffer overflow vulnerability exists in FTPDMIN version 0.96. An attacker can exploit this vulnerability to crash the server with the help of specially crafted packets...

Privilege Escalation

krb5-appl package is vulnerable to privilege escalation. It was found that gssftp, a Kerberos-aware FTP server, did not properly drop privileges. A remote FTP user could use this flaw to gain unauthorized read or write access to files that are owned by the root group...

Access Restriction Bypass

The Apache HTTP Server is vulnerable to Access Restriction Bypass. A second flaw was found in the Apache modproxyftp module. In a reverse proxy configuration, a remote attacker could use this flaw to bypass intended access restrictions by creating a carefully-crafted HTTP Authorization header,...

CVE-2020-1934

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

Code injection

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

lftp: particular remote file names may lead to current working directory erased

It has been discovered that lftp does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker-controlled FTP server, resulting in the removal of all files...

EulerOS 2.0 SP5 : squid (EulerOS-SA-2020-1326)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such...