Heap-based buffer overflow in oftpd daemon

...

EUVD-2004-0376

Malware in sbrugna...

EUVD-2005-2240

Malware in sbrugna...

CVE-2005-2239

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the oftpd operating system package from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Oftpd 0.3.7 Unsupported Address Family Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22073/info Oftpd Server is prone to a remote denial-of-service vulnerability because it mishandles unexpected user-supplied input. Exploiting this issue allows remote attackers to crash the application, denying further...

FreeBSD : oftpd denial-of-service vulnerability (PORT command) (290d81b9-80f1-11d8-9645-0020ed76ef5a)

Philippe Oechslin reported a denial-of-service vulnerability in oftpd. The oftpd server can be crashed by sending a PORT command containing an integer over 8 bits long over 255. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Gentoo Security Advisory GLSA 200701-09 (oftpd)

The remote host is missing updates announced in advisory GLSA 200701-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200403-08 (oftpd)

The remote host is missing updates announced in advisory GLSA 200403-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200403-08 (oftpd)

The remote host is missing updates announced in advisory GLSA 200403-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-09 (oftpd)

The remote host is missing updates announced in advisory GLSA 200701-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: oftpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: oftpd

The remote host is missing an update to the system as announced in the referenced advisory. VID 290d81b9-80f1-11d8-9645-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 473-1 (oftpd)

The remote host is missing an update to oftpd announced via advisory DSA 473-1. OpenVAS Vulnerability Test $Id: deb4731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 473-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-473)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200701-09 : oftpd: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200701-09 oftpd: Denial of Service By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact : Remote, unauthenticated attackers may be ab...

oftpd LPSV及LPRT命令拒绝服务漏洞

BUGTRAQ ID: 22073 CVECAN ID: CVE-2006-6767 oftpd是一款FTP服务程序。 oftpd在处理畸形的LPSV和LPRT命令参数时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 如果上述命令参数数据中包含有不支持的地址家族的话，就会触发异常失败，导致oftpd终止。 oftpd oftpd 0.3.7 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA 200701-09）以及相应补丁: GLSA 200701-09：oftpd: Denial of Service...

CVE-2006-6767

oftpd before 0.3.7 allows remote attackers to cause a denial of service daemon abort via a 1 LPRT or 2 LPASV command with an unsupported address family, which triggers an assertion failure...

CVE-2006-6767

The provided connected advisories confirm CVE-2006-6767 affects the oftpd FTP daemon, with denial of service via LPRT or LPASV commands when an unsupported address family is supplied. Affected versions are prior to 0.3.7; exploitation triggers an assertion failure that aborts the daemon, enabling...

CVE-2006-6767

oftpd before 0.3.7 allows remote attackers to cause a denial of service daemon abort via a 1 LPRT or 2 LPASV command with an unsupported address family, which triggers an assertion failure...