Cross site request forgery (csrf)

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247: Cross-Site Request Forgery (CSRF)

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

Gentoo Security Advisory GLSA 200407-04 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 200407-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200511-11 (linux-ftpd-ssl)

The remote host is missing updates announced in advisory GLSA 200511-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-04 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 200407-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-17 (netkit-ftpd)

The remote host is missing updates announced in advisory GLSA 200801-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200611-05 (ftpd)

The remote host is missing updates announced in advisory GLSA 200611-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200511-11 (linux-ftpd-ssl)

The remote host is missing updates announced in advisory GLSA 200511-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Open-FTPD多个命令远程拒绝服务漏洞

Open-FTPD是一款FTP服务程序。 Open-FTPD处理多个命令存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 传递超长字符串给USER和PASS命令，可导致应用程序崩溃。 Open-FTPD 1.2 目前没有解决方案提供： http://sourceforge.net/projects/open-ftpd !/usr/bin/perl import socket print '---------------------------------------------------------------------' print ' Open&Compact Ftp...

FreeBSD Ports: wu-ftpd

The remote host is missing an update to the system as announced in the referenced advisory. VID ef410571-a541-11d9-a788-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: wu-ftpd

The remote host is missing an update to the system as announced in the referenced advisory. VID 3b7c7f6c-7102-11d8-873f-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: wu-ftpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: wu-ftpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP-UX PHNE_38458 : HP-UX Running ftpd, Remote Privileged Access (HPSBUX02356 SSRT080051 rev.1)

s700800 11.11 ftpd1M and ftp1 patch : A potential security vulnerability has been identified with HP-UX running ftpd. The vulnerability could be exploited to allow remote privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin...

[security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01525562 Version: 1 HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

HP-UX ftpd Remote Privileged Access Authentication Bypass

Binary data 4624.prm...

HP-UX ftpd PAM Authentication Configuration Weakness Authentication Bypass

According to its banner, the version of the HP-UX FTP server running on the remote host is at a patch level before PHNE38458. Such versions reportedly contain a vulnerability that in certain account configurations could be exploited by an anonymous remote attacker to gain privileged access. Note...

HP-UX 'ftpd'未明远程特权提升漏洞

BUGTRAQ ID: 30666 CVE ID：CVE-2008-1668 CNCVE ID：CNCVE-20081668 HP-UX是一款商业性质的操作系统。 HP-UX包含的'ftpd'存在未明特权提升问题，远程攻击者可以利用漏洞获得高权限获得对系统的控制。 目前没有详细漏洞细节提供。 HP-UX B.11.11 可联系供应商获得补丁信息： http://www.hp.com/products1/unix/operating/...