CVE-2011-0203

CVE-2011-0203 describes an absolute path traversal in Apple Mac OS X’s xftpd FTP Server (Mac OS X Server) before 10.6.8. An FTP user could trigger a recursive listing starting from the root, revealing directories not shared for FTP. The vulnerability’s impact is limited to directory listing expos...

CVE-2011-0203

Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing...

Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.8. This update contains security-related fixes for the following components : - App Store - ATS - Certificate Trust Policy - CoreFoundation - CoreGraphics - FTP Server - ImageIO - International Components for Unicode -...

Fedora Update for pure-ftpd FEDORA-2011-7374

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Fedora Update for pure-ftpd FEDORA-2011-7374 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities

Binary data 800790.prm...

Wing FTP Server &quot;ssh public key&quot;身份验证安全绕过漏洞

BUGTRAQ ID: 48335 Wing FTP服务器是安全的多协议文件服务器FTP, HTTP, FTPS, HTTPS, SFTP，适用于Windows, Linux, Mac OSX和Solaris。 Wing FTP服务器在SSH身份验证的实现上存在安全漏洞，恶意用户可利用此漏洞绕过某些安全限制。 此漏洞源于SSH身份验证机制中的错误，在限制到仅公钥身份验证时，可不顾配置的限制使用密码登录 wftpserve Wing FTP Server 3.8.7 wftpserve Wing FTP Server 3.8.6 wftpserve Wing FTP Server 3.8....

Golden FTP PASS Command Buffer Overflow Vulnerability

Golden FTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Easy~FTP Server POST Auth 'MKD' Command Buffer Overflow Vulnerability

Easy FTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wing FTP Server LDAP Authentication Bypass

The remote FTP server is running a version of Wing FTP Server earlier than 3.8.7. As such, it reportedly is affected by an authentication bypass vulnerability when LDAP or Active Directory authentication is used. An attacker can exploit this issue by logging into the FTP server with an empty...

Wing FTP Server Detection

The remote host has an installation of Wing FTP server, which offers file transfer functionality over FTP, FTPS, and SFTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54955; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

Easy Ftp Server v1.7.0.2 Post-Authentication BoF

Exploit for windows platform in category remote exploits !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF Original Author: dookie2000ca || Windows XP SP3 Professional Author: b33f Windows XP Home SP1 Software link:...

Easy FTP Server 1.7.0.2 Buffer Overflow

!/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF Original Author: dookie2000ca || Windows XP SP3 Professional Author: b33f Windows XP Home SP1 Software link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip import...

Nmap NSE net: ftp-bounce

Checks to see if an FTP server allows port scanning using the FTP bounce method. SYNTAX: ftp-bounce.username: Username to log in with. Default ''anonymous''. ftp-bounce.password: Password to log in with. Default ''IEUser@''. OpenVAS Vulnerability Test $Id: gbnmapftpbouncenet.nasl 5499 2017-03-06...

Nmap NSE net: ftp-anon

Checks if an FTP server allows anonymous logins. If anonymous is allowed, gets a directory listing of the root directory and highlights writeable files. SYNTAX: ftp-anon.maxlist: The maximum number of files to return in the directory listing. By default it is 20, or unlimited if verbosity is...

iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash

Exploit for hardware platform in category dos / poc Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash Date: 2011-05-30 Author: offsetIntruder Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: iPhone4 IOS 4.3.2 CVE: N/A import sock...

iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash

iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash Date: 2011-05-30 Author: offsetIntruder Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: iPhone4 IOS 4.3.2 CVE: N/A import...

iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash

Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash Date: 2011-05-30 Author: offsetIntruder Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: iPhone4 IOS 4.3.2 CVE: N/A import socket import sys user="anonymous" print"\n iPhone4 FTP...

iPhone4 FTP Server 1.0 Remote Crash

Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash Date: 2011-05-30 Author: offsetIntruder Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: iPhone4 IOS 4.3.2 CVE: N/A import socket import sys user="anonymous" print"\n iPhone4 FTP...

[SECURITY] Fedora 15 Update: pure-ftpd-1.0.32-1.fc15

Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...

Hack Targets NASA's Earth Observation System

A hacker is claiming that a security hole in a server at NASA’s Goddard Space Flight Center has exposed data related to a satellite-based Earth observation system used to aid in disaster relief. The hacker, who uses the handle “Tinkode” has published a screen capture from what he claims is an FTP...