FreeBSD 代码问题漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A security vulnerability exists in FreeBSD 8.0, 6.3, 4.9, and OpenBSD 4.6, which stems from a null pointer dereference in ftpd/popen.c, and could lead to a remote denial of service of the ftpd service...

CVE-2010-4816: NULL Pointer Dereference

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

SUSE: Security Advisory (SUSE-SU-2014:1558-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

Information disclosure

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468

CVE-2020-7468 affects FreeBSD ftpd (ftpd(8)) with ftpchroot; a bug in the filesystem sandbox, when combined with capabilities available to an authenticated FTP user, can escape ftpchroot restrictions and allow a malicious client to gain root privileges. Public sources describe the vulnerability i...

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468: Undefined Security Weakness

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2013-2512

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

Command injection

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

CVE-2013-2512

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

CVE-2013-2512

The CVE-2013-2512 entry concerns the ftpd gem for Ruby (version 0.2.1). Affected component: the FTP command handling (LIST/NLST) that accepts arguments containing shell metacharacters. Root cause: improper sanitization allows remote attackers to execute arbitrary OS commands through crafted FTP t...

Ruby OS Command Injection Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer, Yukihiro Matsumoto. A security vulnerability in Ruby ftpd gem 0.2.1 allows remote attackers to execute arbitrary operating system commands...

CVE-2013-2512: Improper Neutralization of Special Elements used in an OS Command

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

PT-2021-8374

Name of the Vulnerable Software and Affected Versions ftpd gem version 0.2.1 Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic. Recommendations For ftpd gem version 0.2.1, consider...

Pure-FTPd Denial of Service Vulnerability (CNVD-2020-75153)

Pure-FTPd is an FTP File Transfer Protocol server. A denial-of-service vulnerability exists in Pure-FTPd version 1.0.48, which allows remote attackers to exploit the vulnerability to prevent legitimate server usage by establishing enough connections to exceed the connection limit...

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...