Konica Minolta FTP Utility Buffer Overflow Vulnerability

KONICA MINOLTA FTP Utility is a software used by KONICA MINOLTA copiers. Konica Minolta FTP Utility 1.0 is implemented with a buffer overflow vulnerability due to a failure to check the input size when parsing CWD commands. A remote attacker can exploit this vulnerability to execute arbitrary cod...

SUSE: Security Advisory for wget (SUSE-SU-2014:1366-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

用友致远A6协同管理系统多处敏感信息泄露

用友致远A6协同管理系统：面向广大的企事业组织应用设计，是一个基于互联网的高效协同工作平台和优秀的协同管理系统。它融入先进的协同管理理念，运用领先的网络技术，切实有效的解决企事业组织工作管理中的关键应用。利用它可把日常管理中的业务、事务、事件等信息在单位、部门、组群、个人之间进行及时高效、有序可控、全程共享的沟通和处理。是一套非常适合国情的、并具有很高性价比的软件。 漏洞描述： 用友致远A6协同管理系统多处敏感信息泄露漏洞 漏洞分析： 用友致远A6协同管理系统对敏感文件的访问权限设置不当，导致多处敏感信息泄漏。 /yyoa/assess/js/initDataAssess.jsp...

FerretCMS 2.0.2-alpha - CSRF / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Title : FerretCMS 2.0.2-alpha - Exploit CSRF Vulnerability Author : ZwX Date : 24/02/2015 Download : https://codeload.github.com/JRogaishio/ferretCMS/zip/master Vendor : https://github.com/JRogaishio Level Security : Hight Tested on : Windows ...

PCMan FTP Server Information Disclosure Vulnerability

PCMan FTP Server is FTP server software. A directory traversal vulnerability exists in PCMan FTP Server version 2.0.7, which can be exploited by a remote attacker to read arbitrary files via the RETR command inside the "... /" within the RETR command, this vulnerability can be exploited to read...

Konica Minolta FTP Utility Directory Traversal Vulnerability

Konica Minolta FTP Utility is a free program from Konica Minolta Japan for receiving data sent from compatible devices. A directory traversal vulnerability exists in Konica Minolta FTP Utility version 1.0. A remote attacker could leverage the '... /' string in the RETR command to read arbitrary...

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

Buffer overflow

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

Buffer overflow

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

CVE-2015-7768

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow via long CWD commands, enabling remote code execution. Root cause: failure to validate input length when parsing CWD, leading to an SEH overflow (as described by multiple sources). The vulnerability affects Konica Minolta FTP Utility...

CVE-2015-7767

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow triggered by a long USER command, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). The vulnerability is documented as CVE-2015-7767 across multiple sources (NVD, RH, CNVD, CVE list...

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

Oracle: Security Advisory (ELSA-2014-1764)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

APPLE-SA-2015-09-21-1 watchOS 2

APPLE-SA-2015-09-21-1 watchOS 2 watchOS 2 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, and Apple Watch Edition Impact: Some cards may allow a terminal to retrieve limited recent transaction information when making a payment Description: Th...

Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912)

Full details: http://www.securitygalore.com/site3/safari-pasv Thanks, -Amit Klein http://www.securitygalore.com/...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/seamonkey-2.38-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information, se...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-38.3.0-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Konica Minolta FTP Utility buffer overflow

Added: 10/01/2015 Background The Konica Minolta FTP Utility is an FTP server for Windows 98 through XP. Problem A vulnerability in the FTP Utility allows remote, unauthenticated attackers to execute arbitrary commands by sending a long, specially crafted argument to any command. Resolution Remove...