1047 matches found
CVE-2011-0988
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...
Code injection
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...
CVE-2011-0988
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...
CVE-2011-0988
CVE-2011-0988 affects pure-ftpd 1.0.22 as deployed in SUSE SLES 10 SP3/SP4 and SUSE ED 10 SP3/SP4 when running OES Netware extensions. It creates a world-writable directory that local users could exploit to overwrite arbitrary files and gain privileges via unspecified vectors. SUSE released secur...
CVE-2011-0988
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...
SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7428)
pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch : - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. CVE-2011-0988 %NASLMINLEVEL 70300 ...
Fedora 14 : pure-ftpd-1.0.30-1.fc14 (2011-3349)
Wietse Venema and Victor Duchovni discovered and reported an issue that could lead to a potential information disclosure. An unencrypted FTP command immediately following STARTTLS request would get buffered and processed prior to SSL/TLS handshake, resulting in potential authentication bypass in...
Fedora Update for pure-ftpd FEDORA-2011-3349
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
pureftpd -- multiple vulnerabilities
Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled -- Cf. CVE-2011-0418. Fix a STARTTLS flaw similar to Postfix's CVE-2011-0411. If you're using TLS, upgrading is recommended...
Fedora Update for pure-ftpd FEDORA-2011-3349
Check for the Version of pure-ftpd OpenVAS Vulnerability Test Fedora Update for pure-ftpd FEDORA-2011-3349 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:046)
A security flaw was discovered in pure-ftpd which allows plaintext command injection over TLS similar to CVE-2011-0411. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490...
FreeBSD 5.4-RELEASE ftpd 6.00LS - sendfile Memory Leak
FreeBSD 5.4-RELEASE ftpd 6.00LS - sendfile Memory Leak /FreeBSD include include include include include include include include include int createconnectionchar target, char targetport; void getlineint s; void putlineint s, char out; void usagechar exe; char in8096; char out8096; char out28096; i...
FreeBSD 5.4-RELEASE ftpd 6.00LS - 'sendfile' Memory Leak
/FreeBSD include include include include include include include include include int createconnectionchar target, char targetport; void getlineint s; void putlineint s, char out; void usagechar exe; char in8096; char out8096; char out28096; int mainint argc, char argv extern int optind; extern ch...
Small FTPD Server Directory Traversal Vulnerability
The host is running Small FTPD Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbsmallftpdserverdirtravvun.nasl 5373 2017-02-20 16:27:48Z teissa $ Small FTPD Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbo...
Small FTPD Server Directory Traversal Vulnerability
Small FTPD Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libcglob(3) - Resource Exhaustion Remote ftpd-anonymous (Denial of Service)
libcglob3 - Resource Exhaustion Remote ftpd-anonymous Denial of Service Source: http://securityreason.com/securityalert/7822 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vendors libc/glob3 resource exhaustion +0day remote ftpd-anon Author: Maksymilian Arciemowicz...
Buffer overflow
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command...
CVE-2010-3187
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command...
IBM AIX 5l FTPd Remote DES Hash Exploit
No description provided by source. / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on 4.X too bug found & exploited by Kingcope Version 2.0 - July 2010...
IBM AIX 5l - FTPd Remote DES Hash
IBM AIX 5l - FTPd Remote DES Hash / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on 4.X too bug found & exploited by Kingcope Version 2.0 - July 2010...