1047 matches found
CVE-2000-0574
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function sometimes called by setproctitle, which allows remote attackers to cause a denial of service or execute arbitrary commands...
CVE-2000-0573
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command...
Удаленный root через ftpd в OpenBSD
Ошибка "форматной строки" полностью аналогичная ошибке в wu-ftpd...
FreeBSD-SA-00:29.wu-ftpd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:29 Security Advisory FreeBSD, Inc. Topic: wu-ftpd port contains remote root compromise REVISED Category: ports Module: wu-ftpd Announced: 2000-07-05 Revised: 2000-07-11...
Linux news 3.07.00
WU-FTPD 2.6.1 Вышла новая версия популярного FTP сервера WU-FTPD - WU-FTPD 2.6.1. В данной версии появилась поддержка virtual passwd/virtual shadow как в BeroFTPD. Кроме того пофиксен серьезный security баг, благодаря которому пользователь мог получить права root-а. Также пофиксен баг с возможной...
wu-ftpd remote exploit patched
A remote exploit has been found in the FTP daemon, wu-ftpd. This can allow an attacker full access to your machine. The wu-ftpd daemon is part of the tcpip1.tgz package in the N series. A new tcpip1.tgz package is now available in the Slackware 7.1 tree. We have also provided a seperate patch...
WU-FTPD site_exec() Function Remote Format String
The version of WU-FTPD hosted on the remote server does not properly sanitize the argument of the SITE EXEC command. It may be possible for a remote attacker to gain root access. This script was written by Alexis de Bernis Changes by Tenable: - rely on the banner if we could not log in - changed...
Удаленный root через WU-FTPD
Классическое переполнение буфера в site exec...
ftpd: the advisory version
You might have seen the wuftpd exploit by tf8, he released it in his own lame way. But now I bring you the story behind it. The story begins inside the ftpcmd.y file. Which has the ftp commands in it. The bug is in the siteexecchar cmd function. There is calls lreply200,cmd; In ftpd.c we find voi...
[SECURITY] New Debian wu-ftpd packages released
Package: wu-ftpd wu-ftpd-academ Vulnerability: remote root exploit Debian-specific: no The version of wu-ftpd distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a remote root compromise. The default configuration in...
[SECURITY] New Debian wu-ftpd packages released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz June 22, 2000 - ---------------------------------------------------------------------------- Package: wu-ftpd wu-ftpd-academ...
CVE-2000-0462
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...
Various Lame Stuff
Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...
CVE-2000-0131
CVE-2000-0131: War FTP Daemon 1.6x is vulnerable to a buffer overflow in the CWD/MKD command handling due to improper bounds checking. This can enable a remote attacker to crash the server (DoS) via long MKD/CWD commands. Documented in several sources (OpenVAS/Nessus entries), with CVSSv2 base sc...
CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...
CVE-1999-0789
CVE-1999-0789 concerns a buffer overflow in the AIX ftpd (FTP daemon) within the libc library. Connected sources describe the root cause as a buffer overflow in the libc used by AIX FTPd, with offshoots noting a remote overflow that could crash the FTP server and, in some reports, allow the remot...
CVE-1999-0789
Buffer overflow in AIX ftpd in the libc library...
CVE-2000-0133
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands...
CVE-2000-0133
CVE-2000-0133 affects Tiny FTPd 0.52 beta3 where a buffer overflow in handling FTP commands (STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, RNFR) can allow a remote attacker to execute commands. The connected records consistently reference a buffer overflow vulnerability in Tiny FTPd and list the ...