PT-2020-14491

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP server versions prior to 15.2.1 Description The issue allows remote command execution. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15542: Undefined Security Weakness

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15543: Improper Input Validation

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15541: Undefined Security Weakness

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

PT-2020-14492

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP server versions prior to 15.2.1 Description The issue is related to the mishandling of the CHMOD command in the SolarWinds Serv-U FTP server. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later...

PT-2020-14493

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP server versions prior to 15.2.1 Description The issue concerns the failure to validate an argument path in the SolarWinds Serv-U FTP server. This lack of validation could potentially lead to exploitation. No information i...

Amazon Linux AMI : lftp (ALAS-2020-1383)

The version of lftp installed on the remote host is prior to 4.4.8-12.30. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1383 advisory. It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss ...

EulerOS Virtualization 3.0.6.0 : lftp (EulerOS-SA-2020-1756)

According to the version of the lftp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of...

ZTE U31R20 Design Error Vulnerability

The ZTE U31R20 is a network management product from China's ZTE Corporation ZTE. A security vulnerability exists in ZTE U31R20 version V12.17.20T115. The vulnerability can be exploited by an attacker to log in to the FTP server to tamper with the password and illegally download, modify, upload or...

Medium: lftp

Issue Overview: It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled...

Input validation

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

CVE-2020-6870

CVE-2020-6870 concerns a design error in the ZTE U31R20 NetNumenU31R20 product, version V12.17.20T115. The vulnerability arises from an underlying design flaw that allows an attacker to log in to the FTP server, tamper with passwords, and illegally download, modify, upload, or delete files, poten...

CVE-2020-6870

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

PT-2020-19282

Name of the Vulnerable Software and Affected Versions ZTE U31R20 version V12.17.20T115 NetNumenU31R20 version V12.17.20T115 Description A design error vulnerability allows an attacker to exploit the issue and log in to the FTP server. This could lead to tampering with the password and unauthorize...

CVE-2020-6870: Undefined Security Weakness

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

PT-2020-5979

Name of the Vulnerable Software and Affected Versions Unity Loader and OS Loader Software all versions Description A Use of Hard-coded Credentials issue exists in the software, where fixed credentials are used to simplify file transfer. This could allow unauthorized access to the file transfer...

uftpd Null Pointer Dereference Vulnerability

uftpd is a Linux FTP/TFTP server. A null pointer dereference vulnerability exists in uftpd versions prior to 2.12. The vulnerability stems from the failure of handleCWD in ftpcmd.c in uftpd to properly handle user-supplied paths. An attacker can cause a denial of service via the CWD /... command ...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1666)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FTP Server Write Root Directory

The vulnerability of the FTP server of the Internet Information Services network services on the XP-8741-Atom controller is due to deficiencies in the access restrictions for the anonymous user. Exploiting this vulnerability allows a malicious actor to perform write operations to the root directo...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1601)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...