Mandriva Update for pure-ftpd MDVSA-2011:094 (pure-ftpd)

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Mandriva Update for pure-ftpd MDVSA-2011:094 pure-ftpd Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

[ MDVSA-2011:094 ] pure-ftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:094 http://www.mandriva.com/security/ Package : pure-ftpd Date : May 19, 2011 Affected: 2009.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A denial-of-service DoS attack related to glo...

Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:094)

A denial-of-service DoS attack related to glob brace expansion was discovered and fixed in pure-ftpd CVE-2011-0418. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490 The...

openSUSE Security Update : pure-ftpd (openSUSE-SU-2011:0483-1)

Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

Code injection

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

CVE-2011-0988

CVE-2011-0988 affects pure-ftpd 1.0.22 as deployed in SUSE SLES 10 SP3/SP4 and SUSE ED 10 SP3/SP4 when running OES Netware extensions. It creates a world-writable directory that local users could exploit to overwrite arbitrary files and gain privileges via unspecified vectors. SUSE released secur...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7428)

pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch : - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. CVE-2011-0988 %NASLMINLEVEL 70300 ...

Fedora Update for pure-ftpd FEDORA-2011-3349

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

pureftpd -- multiple vulnerabilities

Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled -- Cf. CVE-2011-0418. Fix a STARTTLS flaw similar to Postfix's CVE-2011-0411. If you're using TLS, upgrading is recommended...

Fedora 14 : pure-ftpd-1.0.30-1.fc14 (2011-3349)

Wietse Venema and Victor Duchovni discovered and reported an issue that could lead to a potential information disclosure. An unencrypted FTP command immediately following STARTTLS request would get buffered and processed prior to SSL/TLS handshake, resulting in potential authentication bypass in...

Fedora Update for pure-ftpd FEDORA-2011-3349

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Fedora Update for pure-ftpd FEDORA-2011-3349 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:046)

A security flaw was discovered in pure-ftpd which allows plaintext command injection over TLS similar to CVE-2011-0411. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490...

Barracuda Networks Launches Bug Bounty Program for Security Products

Barracuda Networks announced on Tuesday that it will pay over $3,100 to anyone who can hack into its security products. This bug bounty program is the first of its kind from a pure-play security vendor. “This initiative reflects our commitment to our customers and the security community at large,...

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except:...

Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe

Exploit for unknown platform in category remote exploits ================================================== Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe ================================================== Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi...

Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow

No description provided by source. Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " host"...