Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1601)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

ruby: Command injection vulnerability in Net::FTP

It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into downloading files with...

Denial Of Service (DoS)

php is vulnerable to denial of service. A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time. An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extensio...

NICO-FTP 3.0.1.19 Buffer Overflow

Exploit Title: NICO-FTP 3.0.1.19 - Buffer Overflow SEH Author: Abdullah AlA+-ASS Date: 2018-09-04 Software link: https://en.softonic.com/download/nico-ftp/windows/post-download Tested Version: 3.0.1.19 Vulnerability Type: Buffer Overflow SEH Tested on OS: Windows XP Professional SP3 x86 eng impor...

Unauthorized Write To Arbitrary Location

Hive HPL/SQL is vulnerable to unauthorized write to arbitrary location. FTP client in HPL/SQL fails to validate the download destination location for COPY FROM FTP statement, thereby allowing a malicious FTP server to run the command to download the file to any location...

ruby: Command injection vulnerability in Net::FTP

It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into downloading files with...

CVE-2017-17405

It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into downloading files with...

Micro Focus Rumba FTP Client 4.x Stack Overflow

Exploit Title: Rumba FTP Client 4.x stack overflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx Software Link:...

Rumba FTP Client 4.x - Remote Stack Buffer Overflow (SEH)

Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx Software Link:...

Moderate: Red Hat Security Advisory: wget security update

An updated wget package that fixes one security issue is now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

wget: arbitrary filesystem access

It was found that wget was susceptible to a symlink attack which could create arbitrary files, directories or symbolic links and set their permissions when retrieving a directory recursively through FTP. By default, when retrieving ftp directories recursively and a symbolic link is encountered, t...

FTP Voyager 15.2.0.11 Directory Traversal

Vulnerability ID: HTB22625 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpvoyager.html Product: FTP Voyager Vendor: Rhino Software http://www.ftpvoyager.com/ Vulnerable Version: 15.2.0.11 and Probably Prior Versions Vendor Notification: 22 September 2010...

SoftX FTP Client 3.3 Directory Traversal

Vulnerability ID: HTB22541 Reference: http://www.htbridge.ch/advisory/directorytraversalinsoftxftpclient.html Product: SoftX FTP Client Vendor: SoftX.Org http://www.softx.org/ftp.html Vulnerable Version: 3.3 for windows and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability...

Directory Traversal Vulnerability in 32bit FTP Client

Vulnerability ID: HTB22512 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityin32bitftpclient.html Product: 32bit FTP Client Vendor: ElectraSoft http://www.electrasoft.com/32ftp.htm Vulnerable Version: 10.07.09 and Probably Prior Versions Vendor Notification: 19 July 2010...

Robo-FTP Response Processing Buffer Overflow Vulnerability

This host has installed Robo-FTP and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbroboftpclientbofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Robo-FTP Response Processing Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone...

Ipswitch WS FTP Client Format String Vulnerability

This host is running WS FTP Client, which is prone to Format String Vulnerability. OpenVAS Vulnerability Test $Id: secpodwsftpclientformatstringvuln900206.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Ipswitch WS FTP Client Format String Vulnerability Authors: Veerendra GG Copyright: Copyrigh...

3D-FTP Multiple Directory Traversal Vulnerabilities

The remote host has the 3D-FTP FTP client installed. The installed version of 3D-FTP is affected by multiple directory traversal vulnerabilities. By prefixing '../' to filenames in response to 'LIST' and 'MLSD' commands, it may be possible for an attacker to write arbitrary files outside the...

DEBIAN-CVE-2006-6719

The ftpsyst function in ftp-basic.c in Free Software Foundation FSF GNU wget 1.10.2 allows remote attackers to cause a denial of service application crash via a malicious FTP server with a large number of blank 220 responses to the SYST command...

firefox-DoS.txt

!/usr/bin/perl author: tomas kempinsky use strict; use Socket; my $port = shift || 2121; my $proto = getprotobyname'tcp'; my $payload = "\x32\x32\x30\x20\x5a\x0d\x0a\x33". "\x33\x31\x20\x5a\x0d\x0a\x35\x30". "\x30\x20\x44\x6f\x53\x0d\x0a\x35". "\x30\x30\x20\x5a\x0d\x0a"; socketSERVER, PFINET,...