183 matches found
Transmit.app <= 3.5.5 ftps:// URL Handler Heap Buffer Overflow PoC
No description provided by source. !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.1//EN http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd html head titleMOAB-19-01-2007/title script function boom var recipient = document.getElementById'testbox'; var str = ''; for var i = 0; i 408; i++ str = str + 'A' str =...
SSL/TLS: FTP 'AUTH TLS' Command Detection
Checks if the remote FTP server supports SSL/TLS FTPS with the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cURL/libcURL SSL证书验证安全限制绕过漏洞
BUGTRAQ ID: 66296 CVE ID: CVE-2014-2522 cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 cURL/libcURL在服务器证书的验证上存在安全漏洞，成功利用后可导致中间人攻击或服务器欺骗。 0 cURL 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://curl.haxx.se/...
[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
[SECURITY] Fedora 18 Update: filezilla-3.7.3-1.fc18
FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...
Debian DSA-2767-1 : proftpd-dfsg - denial of service
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
[SECURITY] Fedora 19 Update: filezilla-3.7.3-1.fc19
FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...
FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities
FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities Title: ====== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1041 VL-ID: ===== 1041 Common Vulnerability Scoring System:...
FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities
Title: ====== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1041 VL-ID: ===== 1041 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: =============...
[SECURITY] Fedora 18 Update: curl-7.27.0-9.fc18
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
curl / libcURL "tailmatch()" Cookie信息泄露漏洞
CVECAN ID: CVE-2013-1944 cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 cURL/libcURL 7.29.0及之前版本的函数"tailmatch" lib/cookie.c通过matching tail根据域名匹配cookie路径域时出错，导致泄露另一个域的cookie。 0 cURL 7.x 厂商补丁： cURL ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://curl.haxx.se/...
Fedora Update for curl FEDORA-2013-2098
Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2013-2098 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for curl FEDORA-2012-0894
Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2012-0894 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Sysax SSH Username Remote Code Execution
Added: 03/06/2012 BID: 52190 OSVDB: 79689 Background Sysax Multi Server is a Secure FTP Server and SSH2 Secure Shell Server combined into a single product. It simultaneously supports remote access and file transfer using FTP, FTPS, SFTP, Telnet, and Secure Shell. It also supports web based file...
FTPS Cleartext Fallback Security Bypass
The remote FTPS server running on the remote host is affected by a security bypass vulnerability due to accepting unencrypted commands if SSL negotiations fail. A man-in-the-middle attacker can exploit this to intercept credentials and modify files. C Tenable Network Security, Inc...
Serv-U FTPS Server命令通道SSL协商安全限制绕过漏洞
BUGTRAQ ID: 50881 Serv-U FTP是一款FTP服务程序。 RhinoSoft Serv-U FTPS Server实现上存在漏洞，虽然命令通道上SSL协商失败，但服务器还是让命令通道处于运行状态，可被利用执行中间人攻击 RhinoSoft Serv-U 9.4.0.0 RhinoSoft Serv-U 9.3.0.1 RhinoSoft Serv-U 9.2.0.1 RhinoSoft Serv-U 9.1.0.4 RhinoSoft Serv-U 9.1.0.2 RhinoSoft Serv-U 9.1.0.0 RhinoSoft Serv-U 9.0.0.1...
Fedora Update for curl FEDORA-2011-8586
Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2011-8586 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Wing FTP Server Detection
The remote host has an installation of Wing FTP server, which offers file transfer functionality over FTP, FTPS, and SFTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54955; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...
Fedora 15 : proftpd-1.3.4-0.8.rc2.fc15 (2011-5098)
The second release candidate for proftpd 1.3.4. This includes fixes for a number of security issues : - Plaintext command injection vulnerability in FTPS implementation - Badly formed SSH messages cause DoS - Limit recursion depth for untrusted regular expressions 673040 The update also contains ...
Fedora 13 : proftpd-1.3.3e-1.fc13 (2011-5033)
This update, to the current upstream maintenance release, fixes a large number of bugs see NEWS for details, and also a couple of security issues : - Plaintext command injection vulnerability in FTPS implementation i.e. modtls. See http://bugs.proftpd.org/showbug.cgi?id=3624 for details. -...