CVE-2012-4088

Cisco UCS FTP server vulnerability (CVE-2012-4088) arises from an undocumented hard-coded password for an unspecified user account. An unauthenticated, adjacent attacker could read or modify files by exploiting this credential. Cisco’s advisory (CISCO-SA-20130927-CVE-2012-4088) confirms the issue...

[SECURITY] Fedora 19 Update: proftpd-1.3.4d-4.fc19

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 20 Update: proftpd-1.3.4d-4.fc20

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 18 Update: proftpd-1.3.4d-4.fc18

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Fedora Update for proftpd FEDORA-2013-16810

Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2013-16810 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ICS Vendor Fixes Hard-Coded Credential Bugs Nearly Two Years After Advisory

Nearly two years after a security researcher published details of the hard-coded credentials that ship with a slew of industrial control system products made by Schneider Electric, the company has released updated firmware that fix the problems. The vulnerabilities, which were discovered by...

PCMAN FTP Server Post-Authentication STOR Command Buffer Overflow

This Metasploit module exploits a buffer overflow vulnerability found in the STOR command of the PCMAN FTP version 2.07 server when the "/../" parameters are also sent to the server. Please note authentication is required in order to trigger the vulnerability. The overflowing string will also be...

PCMAN FTP Server Post-Authentication STOR Command Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PCMAN FTP Server Post-Authentication...

freeFTPd 1.0.10 PASS Command SEH Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'freeFTPd 1.0.10 PASS Command SEH...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-firefox-17.0.9esr-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements. For...

PCMAN FTP 2.07 STOR Command - Stack Overflow Exploit (MSF)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'PCMAN FTP Server STOR Command Stack Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability found in the STOR command of the PCMAN FTP v2.07 Server when the "/../" parameters...

PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PCMAN FTP Server STOR Command Stack...

PCMan FTP Server 2.07 - STOR Remote Stack Overflow (Metasploit)

PCMan FTP Server 2.07 - STOR Remote Stack Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

Western Digital Arkeia Appliance 10.0.10 - Multiple Vulnerabilities

Western Digital Arkeia Appliance 10.0.10 - Multiple Vulnerabilities Exploit Title: Western Digital Arkeia Appliance v10.0.10 Date: Sep 17 2013 Exploit Author: xistence Vendor Homepage: www.arkeia.com Tested on: Virtual Appliance - ESXi 5.1 Affected Version : v10.0.10 and lower Link:...

PCMAN FTP Server Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PCMAN FTP Server STOR Command Stack...

FileZilla: Multiple vulnerabilities

Background FileZilla is an open source FTP client. Description Multiple vulnerabilities have been discovered in FileZilla. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to connect to a malicious server, resulting in possible arbitrary...

Perl Programming Language 1.6 File Upload

TITLE: Unauthenticated Remote File Upload via HTTP for perl-Programming language 1.6 on iOS Date: 8/1/2013 Author: Larry W. Cashdollar, @larry0 Download: https://itunes.apple.com/us/app/perl-programming-language/id578116006?mt=8&ls=1 http://www.tayutec.com/indexen.html Description: "This is an io...

FreeBSD-SA-13:11.sendfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-13:11.sendfile Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in sendfile2 Category: core Module: sendfile Announced: 2013-09-10 Credits: E...

[slackware-security] subversion

New subversion packages are available for Slackware 14.0 and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/subversion-1.7.13-i486-1slack14.0.txz: Upgraded. This update fixes a local privilege escalation vulnerability via symlink attack...

freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'freeFTPd 1.0.10 PASS Command SEH...