Solaris 10 (x86) : 140400-03

SunOS 5.10x86: ftp and ftpd patch. Date this patch was last updated by Sun : Jun/04/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 140399-03

SunOS 5.10: ftp and ftpd patch. Date this patch was last updated by Sun : Jun/04/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

ftp.us2.freshrpms.net XSS vulnerability

Open Bug Bounty ID: OBB-578465 Description| Value ---|--- Affected Website:| ftp.us2.freshrpms.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ruby, rubygem, rubygems security update

CentOS Errata and Security Advisory CESA-2018:0378 An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

[slackware-security] openssh

New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and 14.2 to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssh-7.4p1-i586-2slack14.2.txz: Rebuilt. sftp-server: in read-only mode, sftp-server was incorrectly...

CVE-2018-0087

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

CVE-2018-0087

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

Design/Logic Flaw

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

CVE-2018-0087

CVE-2018-0087 affects Cisco Web Security Appliance (WSA) via an FTP authentication bypass. Affects AsyncOS for WSA on virtual/hardware appliances running AsyncOS 10.5.1; vulnerability arises from incorrect FTP credential validation. If FTP is enabled on the management interface, an unauthenticate...

CVE-2018-0087

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

CVE-2018-0087

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

Cisco Web Security Appliance FTP Authentication Bypass Vulnerability

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

CVE-2018-6082

Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page...

SEGGER embOS/IP FTP Server Denial of Service Vulnerability

SEGGER embOS/IP FTP Server is an FTP server from SEGGER Microcontroller, Germany. A security vulnerability exists in SEGGER embOS/IP FTP Server version 3.22. A remote attacker can cause a denial of service daemon crash by sending an invalid LIST, STOR, or RETR command to exploit the vulnerability...

CVE-2018-7449

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

CVE-2018-7449

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

Command injection

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

CVE-2018-7449

CVE-2018-7449 summary : SEGGER embOS/IP FTP Server for Windows is affected up to version 3.22a. The vulnerability allows remote attackers to trigger a denial of service (daemon crash) by sending invalid FTP commands LIST, STOR, or RETR. Affected product: embOS/IP FTP Server v3.22 (pre-3.22a). The...

CVE-2018-7449

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...

SEGGER embOS/IP FTP Server 3.22 - Denial of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SEGGER-embOS-FTP-SERVER-v3.22-FTP-COMMANDS-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ============= www.segger.com Product: =========== embOS/IP FTP Server v3.22...