[SECURITY] Fedora 22 Update: duplicity-0.6.25-3.fc22

Duplicity incrementally backs up files and directory by encrypting tar-format volumes with GnuPG and uploading them to a remote or local file server. In theory many protocols for connecting to a file server could be supported; so far ssh/scp, local file access, rsync, ftp, HSI, WebDAV and Amazon ...

[slackware-security] samba

New samba packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.17-i486-1slack14.1.txz: Upgraded. This package fixes security issues since the last update: BUG 11077: CVE-2015-0240: talloc...

PCMan FTP Server 2.0.7 - Buffer Overflow - MKD Command Exploit

Exploit for windows platform in category remote exploits Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3 import socket 348 Bytes Bind Shell Port TCP/4444 shellcode =...

PCMAN FTP Server MKD Command Buffer Overflow vulnerability

PCMAN FTP server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PC-Man-FTP-Server

Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3...

ownCloud FTP Backend 'user_external' Password Authentication Bypass Vulnerability

ownCloud is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

[slackware-security] patch

New patch packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/patch-2.7.4-i486-1slack14.1.txz: Upgraded. Patch no longer follows symbolic links to input and output files...

PCMan FTP Server 2.0.7 - MKD Remote Buffer Overflow

PCMan FTP Server 2.0.7 - MKD Remote Buffer Overflow Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3 import socket 348 Bytes Bind Shell Port TCP/4444 shellcode =...

PCMan FTP Server 2.0.7 - 'MKD' Remote Buffer Overflow

Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3 import socket 348 Bytes Bind Shell Port TCP/4444 shellcode = "\xdb\xcc\xba\x40\xb6\x7d\xba\xd9\x74\x24\xf4\x58\x29\xc9" shellcode +=...

Multi Purpose Bruteforcer: Patator

Multi Purpose Bruteforcer Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. Patator is a multi-threaded tool written in Python, that strives to be more reliable and flexible than his fellow predecessors...

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0604

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

Memory corruption

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

Directory traversal

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

CVE-2014-0603

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

CVE-2014-0605

The connected advisories confirm CVE-2014-0605 affects Attachmate Reflection FTP Client (rftpcom.dll ActiveX) with a directory traversal flaw in the SaveSettings method that enables remote code execution. Affected software includes versions prior to 14.1.429; ZDI notes exploitation requires user ...

CVE-2014-0603

The issue is Attachmate Reflection FTP Client’s rftpcom.dll ActiveX control (GetGlobalSettings, GetSiteProperties3) causing memory corruption leading to remote code execution. CVE-2014-0603 details: memory corruption with execution of arbitrary code via those methods on affected builds before 14....

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0604

CVE-2014-0604 is a directory traversal vulnerability in the Attachmate Reflection FTP Client’s rftpcom.dll ActiveX control (and Attachmate Reflection Secure FTP Client per ZDI) that allows remote code execution via the StartLog method. The flaw exists before version 14.1.429. Exploitation details...

Extract data from pcap files: PCredz

Extract data from pcap files with PCredz This tool extracts Credit card numbers, NTLMDCE-RPC, HTTP, SQL, LDAP, etc, Kerberos AS-REQ Pre-Auth etype 23, HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. PCredz Features: Extract from a pcap file or from a live...