CVE-2020-8635

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files...

Wing FTP Server 6.2.5 - Privilege Escalation

Wing FTP Server 6.2.5 - Privilege Escalation Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-03 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link:...

Wing FTP Server 6.2.3 - Privilege Escalation

Wing FTP Server 6.2.3 - Privilege Escalation Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-02 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link:...

Wing FTP Server 6.2.5 Privilege Escalation

Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-03 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.5 and...

Wing FTP Server 6.2.5 - Privilege Escalation

Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-03 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.5 and...

Wing FTP Server 6.2.3 - Privilege Escalation Exploit

Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-02 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.3 Tested...

Wing FTP Server 6.2.3 Privilege Escalation

Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-02 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.3 Tested...

Wing FTP Server 6.2.3 - Privilege Escalation

Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-02 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.3 Tested...

Solarwinds Serv-U Ftp Server Cross-Site Scripting (CVE-2019-13182)

A cross-site scripting vulnerability exists in Solarwinds Serv-U Ftp server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

[SECURITY] [DLA 2123-1] pure-ftpd security update

Package : pure-ftpd Version : 1.0.36-3.2+deb8u1 CVE ID : CVE-2020-9274 Debian Bug : 925666 An uninitialized pointer vulnerability was discovered in pure-ftpd, a secure and efficient FTP server, which could result in an out-of-bounds memory read and potential information disclosure. For Debian 8...

Fedora: Security Advisory for proftpd (FEDORA-2020-876b1f664e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: proftpd-1.3.6c-1.fc31

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 30 Update: proftpd-1.3.6c-1.fc30

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Ubuntu 16.04 LTS / 18.04 LTS : Squid vulnerabilities (USN-4289-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4289-1 advisory. Jeriko One discovered that Squid incorrectly handled memory when connected to an FTP server. A remote attacker could possibly use this issue ...

[SECURITY] [DLA 2115-1] proftpd-dfsg security update

Package : proftpd-dfsg Version : 1.3.5e+r1.3.5-2+deb8u6 CVE ID : CVE-2020-9273 It was discovered that there was a a use-after-free vulnerability in in the proftpd-dfsg FTP server. Exploitation of this vulnerability within the memory pool handling could have allowed a remote attacker to execute...

USN-4289-1 squid, squid3 vulnerabilities

Jeriko One discovered that Squid incorrectly handled memory when connected to an FTP server. A remote attacker could possibly use this issue to obtain sensitive information from Squid memory. CVE-2019-12528 Regis Leroy discovered that Squid incorrectly handled certain HTTP requests. A remote...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Edit Account feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming from a...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-10630)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Network Settings feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming fro...

Maxum Rumpus Cross-Site Scripting Vulnerability

Maxum Rumpus is an FTP and Web file transfer server. A cross-site scripting vulnerability exists in Maxum Rumpus that can be exploited by an attacker to execute client-side code...

Rumpus FTP Server Web File Manager Web Settings Component Cross-Site Scripting Vulnerability

Rumpus FTP Server is an Internet file transfer solution for the Mac platform. A cross-site scripting vulnerability exists in the Web Settings component of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the WEB...