11 matches found
EUVD-2010-3845
Malware in sbrugna...
EUVD-1999-1456
Malware in sbrugna...
Ubuntu: Security Advisory (USN-7297-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7297-1: ProFTPD vulnerabilities
Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could use this vulnerability to bypass security features like encryption and integrity checks. CVE-2023-48795 Martin Mirchev discovered that...
CVE-2024-39795
Multiple external config control vulnerabilities exist in the nas.cgi setnas proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...
CVE-2024-39793
CVE-2024-39793 affects the Wavlink AC3000 (M33A8.V5030.210505) nas.cgi set_nas() proftpd functionality. An authenticated HTTP request can inject configuration data via ftp_name (and related ftp_* fields), writing to nvram and ultimately generating a proftpd.conf through storage.sh ftp → proftpd.s...
Security update for proftpd (important)
openSUSE Security Update: Security update for proftpd Announcement ID: openSUSE-SU-2024:0008-1 Rating: important References: 1218144 1218344 Cross-References: CVE-2023-48795 CVE-2023-51713 CVSS scores: CVE-2023-48795 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2023-48795 SUSE: 5.9...
Multiple vendors FTP denial of service
Proftpd built-in 'ls' command has a globbing bug that allows remote denial-of-service. Here's a simple exploit, tested on the Proftpd site : $ ftp ftp.proftpd.org ... Name ftp.proftpd.org:j: ftp ... 230 Anonymous access granted, restrictions apply. Remote system type is UNIX. Using binary mode to...
[SECURITY] [DSA 029-2] New proftpd packages for m68k available
---------------------------------------------------------------------------- Debian Security Advisory DSA-029-2 [email protected] http://www.debian.org/security/ Martin Schulze March 6, 2001 - ---------------------------------------------------------------------------- Package : proftpd...
[SECURITY] [DSA-029-1] New version of proftpd released
Package: proftpd Vulnerability: remote DOS & potential buffer overflow Debian-specific: no The following problems have been reported for the version of proftpd in Debian 2.2 potato: 1. There is a memory leak in the SIZE command which can result in a denial of service, as reported by Wojciech...
Закрыты дырки в ProFTPD
3 различных удаленных дырки...