6451 matches found
[SECURITY] Fedora 9 Update: proftpd-1.3.1-8.fc9
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
FreeBSD-SA-09:01.lukemftpd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:01.lukemftpd Security Advisory The FreeBSD Project Topic: Cross-site request forgery in lukemftpd8 Category: core Module: lukemftpd Announced: 2009-01-07...
BulletProof FTP客户端.bps文件处理栈溢出漏洞
BUGTRAQ ID: 33024 BulletProof FTP Server之前名为G6 FTP Server,是一款全功能的Windows平台FTP服务器软件。 如果用户受骗使用BulletProof FTP Server的客户端加载了恶意的.bps文件的话,就可能触发栈溢出,导致执行任意指令。 BulletProof FTP Client BulletProof Software -------------------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.bpftp.com/...
WinFTP Server PASV Command Denial of Service Vulnerability
This host is running WinFTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodwinftpserverdosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ WinFTP Server PASV Command Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2008 SecPod,...
XM Easy Personal FTP Server Denial of Service Vulnerability
This host is running XM Easy FTP Personal FTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxmeasyftpdosvuln.nasl 5657 2017-03-21 11:08:08Z cfi $ XM Easy Personal FTP Server Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 20...
FreeBSD-SA-08:12.ftpd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:12.ftpd Security Advisory The FreeBSD Project Topic: Cross-site request forgery in ftpd8 Category: core Module: ftpd Announced: 2008-12-23 Credits: Maksymilian...
Authentication flaw
Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name...
CVE-2008-5666
WinFTP FTP Server 2.3.0, when passive aka PASV mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command...
Command injection
WinFTP FTP Server 2.3.0, when passive aka PASV mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command...
CVE-2008-5666
CVE-2008-5666 affects WinFTP Server 2.3.0. In PASV mode, a sequence of FTP sessions with an invalid NLST -1 can trigger a denial of service. Public sources (e.g., PacketStorm Metasploit PoC, OpenVAS entries) corroborate a PASV/NLST DoS vector but do not provide vendor-issued fixes within the supp...
CVE-2008-5666
WinFTP FTP Server 2.3.0, when passive aka PASV mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command...
CVE-2008-5626
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument...
Command injection
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument...
CVE-2008-5626
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument...
CVE-2008-5626
CVE-2008-5626 affects XM Easy Personal FTP Server via NLST DoS. Public details in connected docs show vulnerable versions 5.6.0 and 5.7.0 can be crashed by a crafted NLST argument (e.g., -1); disclosure notes authenticated access is required (per initial description), with related Metasploit modu...
Teamtek Universal FTP Server <= 1.0.50 Multiple Commands DoS Vulnerabilities
Universal FTP server is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2006-7235
Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service daemon crash or hang via 1 multiple STOR aka PUT commands, or an MKD command followed by 2 a '' argument, 3 a '|' argument, 4 spaces, or 5 a long string. NOTE: the provenance of this information is unknown; t...
Command injection
Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via 1 a certain CWD command, 2 a long LIST command, or 3 a certain PORT command...