War FTP Daemon 1.82 Denial of Service

According to its banner, the version of War FTP Daemon installed on the remote host is 1.82. As such, it is potentially affected by a flaw in how log messages are logged to the Windows Event log. A remote, unauthenticated attacker could leverage this issue to cause a denial of service. Note that...

mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-thunderbird-17.0.4esr-i486-1slack14.0.txz: Upgraded. This release contains security fixes and...

Ruby ftpd Gem 'filename' Parameter Remote Command Execution

Nessus was able to exploit a code injection vulnerability in the Ruby ftpd Gem by providing a specially crafted 'filename' parameter to the LIST command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65078; scriptversion"1.9"; scriptcvsdate"Date: 2018/11/15 20:50:22...

Remote File Manager 1.2 iOS - Multiple Vulnerabilities

Remote File Manager 1.2 iOS - Multiple Vulnerabilities Title: ====== Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities Date: ===== 2013-02-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=882 VL-ID: ===== 882 Common Vulnerability Scoring System:...

Remote File Manager 1.2 XSS / Local File Inclusion

Title: ====== Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities Date: ===== 2013-02-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=882 VL-ID: ===== 882 Common Vulnerability Scoring System: ==================================== 6.1 Introduction: ============...

Ruby Gem ftpd-0.2.1 Remote Command Execution

Remote command execution for Ruby Gem ftpd-0.2.1 2/28/2013 https://github.com/wconrad/ftpd http://rubygems.org/gems/ftpd "ftpd is a pure Ruby FTP server library. It supports implicit and explicit TLS, passive and active mode, and most of the commands specified in RFC 969. It an be used as part of...

Denial of Service vulnerability in War FTP Daemon 1.82

Late last week, security researchers at jura.ba reported a Denial of Service vulnerability in War FTP Daemon 1.82. The problem was rooted in the way log messages was relayed from the internal log handler to the Windows Event log when the sever was running as a Windows service. Theoretically, it...

War FTP Daemon memory corruption

Memory corruption on logging...

Sami FTP Server 2.0.1 LIST Command Buffer Overflow

A buffer overflow is triggered when a long LIST command is sent to the server and the user views the Log tab. from socket import import struct, sys IP = sys.argv1 Windows bind shellcode from https://code.google.com/p/w32-bind-ngs-shellcode/ Remove bad chars using msfencode: msfencode -b...

Sami FTP Server 2.0.1 - 'LIST' Buffer Overflow

!/usr/bin/env python Exploit Title: Sami FTP LIST buffer overflow Date: 27 Feb 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP Server 2.0.1 Tested on: Windows XP Pro SP1, English Windows XP Pro SP2, English...

Sami FTP Server 2.0.1 Buffer Overflow

!/usr/bin/env python Exploit Title: Sami FTP LIST buffer overflow Date: 27 Feb 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP Server 2.0.1 Tested on: Windows XP Pro SP1, English Windows XP Pro SP2, English...

Fedora Update for curl FEDORA-2013-2098

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2013-2098 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Sami FTP Server 2.0.1 - LIST Buffer Overflow

Sami FTP Server 2.0.1 - LIST Buffer Overflow !/usr/bin/env python Exploit Title: Sami FTP LIST buffer overflow Date: 27 Feb 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP Server 2.0.1 Tested on: Windows XP Pro SP1...

Nmap NSE 6.01: ftp-anon

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: ftp-brute

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: ftp-anon

Checks if an FTP server allows anonymous logins. If anonymous is allowed, gets a directory listing of the root directory and highlights writeable files. SYNTAX: ftp-anon.maxlist: The maximum number of files to return in the directory listing. By default it is 20, or unlimited if verbosity is...

Nmap NSE 6.01: ftp-brute

Performs brute force password auditing against FTP servers. This uses the standard unpwdb username/password list. However, in tests FTP servers are significantly slower than other servers when responding, so the number of usernames/passwords can be artificially limited using script arguments...

Nmap NSE 6.01: ftp-bounce

Checks to see if an FTP server allows port scanning using the FTP bounce method. SYNTAX: ftp-bounce.username: Username to log in with. Default ''anonymous''. ftp-bounce.password: Password to log in with. Default ''IEUser@''. OpenVAS Vulnerability Test $Id: gbnmap6ftpbounce.nasl 7006 2017-08-25...

Nmap NSE 6.01: ftp-bounce

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sami FTP Server LIST Command Buffer Overflow

This module exploits a stack based buffer overflow on Sami FTP Server 2.0.1. The vulnerability exists in the processing of LIST commands. In order to trigger the vulnerability, the "Log" tab must be viewed in the Sami FTP Server managing application, in the target machine. On the other hand, the...