[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/samba-4.4.12-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: All versions of Samba prior to 4.6.1,...

[slackware-security] mcabber

New mcabber packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mcabber-1.0.5-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: An incorrect implementation of XEP-028...

Updated thunderbird packages fix security vulnerability

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. CVE-2017-5400 A crash triggerable by web content in which an ErrorResult references unassigned memory due to a logic error. The resulting crash may...

CVE-2017-6803

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in the Scheduler in SolarWinds formerly Serv-U FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that 1 change the admin password, 2 terminate the scheduler, or 3 possibly...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in the Scheduler in SolarWinds formerly Serv-U FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that 1 change the admin password, 2 terminate the scheduler, or 3 possibly...

CVE-2017-6803

CVE-2017-6803 affects SolarWinds (formerly Serv-U) FTP Voyager Scheduler 16.2.0. The vulnerability is described as multiple cross-site request forgery (CSRF) flaws in the Scheduler web interface that let an attacker hijack a user’s session to perform actions such as (1) changing the admin passwor...

CVE-2017-6803

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in the Scheduler in SolarWinds formerly Serv-U FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that 1 change the admin password, 2 terminate the scheduler, or 3 possibly...

FTPShell Server 6.56 ChangePassword Buffer Overflow

print ''' Created: ScrR1pTK1dd13 Name: Greg Priest Mail: [email protected] Exploit Title: FTPShell Server 6.56 ChangePassword DEP off BufferOverflow 0Day Date: 2017.03.19 Exploit Author: Greg Priest Version: FTPShell Server 6.56 Tested on: Windows7 x64 HUN/ENG Enterprise ''' overflow...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...

CVE-2017-6880

Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via a long MLST command...

Buffer overflow

Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via a long MLST command...

CVE-2017-6880

Cerberus FTP Server 8.0.10.3 is affected by CVE-2017-6880: a remote buffer overflow triggered by an overly long MLST command can crash the daemon and may have other impact. Public PoCs and exploits demonstrate the issue, confirming remote code/denial conditions per the CVE entry and related mater...

CVE-2017-6880

Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via a long MLST command...

Cerberus FTP Server 8.0.10.3 - MLST Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc + Title: Cerberus FTP Server 8.0.10.3 – 'MLST' Remote Buffer Overflow + Credits / Discovery: Nassim Asrir + Author Contact: email protected || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: CVE-2017-6880...

Directory traversal

Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory...

CVE-2017-6510

Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory...

CVE-2017-6510

Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory...

CVE-2017-6510

CVE-2017-6510 affects Easy File Sharing FTP Server v3.6 and earlier, exposing a directory traversal flaw that lets an attacker list and download arbitrary files outside the FTP root. The vulnerability is described across multiple sources (NVD entry; CIRCL sighting; CNVD/CVE records; 1337DAY explo...

FTP Voyager Scheduler Cross-Site Request Forgery Vulnerability

FTP Voyager Scheduler is a program that starts or stops the scheduler when a user creates a directory or uploads or downloads a file by creating a task or command. A cross-site request forgery vulnerability exists in FTP Voyager Scheduler that stems from a failure to properly validate HTTP...

Cerberus FTP Server 8.0.10.3 - MLST Buffer Overflow (PoC)

Cerberus FTP Server 8.0.10.3 - MLST Buffer Overflow PoC + Title: Cerberus FTP Server 8.0.10.3 – 'MLST' Remote Buffer Overflow + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE:...