Denial of service vulnerability in wzdftpd-0.8.0 PORT type

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in the wzdftpd-0.8.0 PORT type that can be exploited by an attacker to cause a system crash...

Denial of service vulnerability in wzdftpd (CNVD-2020-28971)

wzdftpd is a portable, modular and efficient ftp server with support for SSL, IPv6, UTF-8 compatibility, multithreading, modules, external scripts. A denial of service vulnerability exists in wzdftpd, which can be exploited by an attacker to cause the server to deny service...

FTPDMIN Buffer Overflow Vulnerability

FTPDMIN is a Windows-based FTP File Transfer Protocol server. A buffer overflow vulnerability exists in FTPDMIN version 0.96. An attacker can exploit this vulnerability to crash the server with the help of specially crafted packets...

Privilege Escalation

krb5-appl package is vulnerable to privilege escalation. It was found that gssftp, a Kerberos-aware FTP server, did not properly drop privileges. A remote FTP user could use this flaw to gain unauthorized read or write access to files that are owned by the root group...

Access Restriction Bypass

The Apache HTTP Server is vulnerable to Access Restriction Bypass. A second flaw was found in the Apache modproxyftp module. In a reverse proxy configuration, a remote attacker could use this flaw to bypass intended access restrictions by creating a carefully-crafted HTTP Authorization header,...

CVE-2020-1934

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

Code injection

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-1934: Use of Uninitialized Resource

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

lftp: particular remote file names may lead to current working directory erased

It has been discovered that lftp does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker-controlled FTP server, resulting in the removal of all files...

EulerOS 2.0 SP5 : squid (EulerOS-SA-2020-1326)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such...

Internet Bug Bounty: Squid leaks previous content from reusable buffer

Summary: A malicious response to a FTP request can cause Squid to miscalculate the length of a string copying data past the terminating NULL. Due to Squid's memory pool the contents that is exposed could range from internal data, to other user's private Request/Response to Squid. This exist in...

Huawei EulerOS: Security Advisory for lftp (EulerOS-SA-2020-1259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : lftp (EulerOS-SA-2020-1259)

According to the version of the lftp package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to ...