CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7428)

pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch : - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. CVE-2011-0988 %NASLMINLEVEL 70300 ...

pureftpd -- multiple vulnerabilities

Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled -- Cf. CVE-2011-0418. Fix a STARTTLS flaw similar to Postfix's CVE-2011-0411. If you're using TLS, upgrading is recommended...

Fedora 14 : pure-ftpd-1.0.30-1.fc14 (2011-3349)

Wietse Venema and Victor Duchovni discovered and reported an issue that could lead to a potential information disclosure. An unencrypted FTP command immediately following STARTTLS request would get buffered and processed prior to SSL/TLS handshake, resulting in potential authentication bypass in...

Fedora Update for pure-ftpd FEDORA-2011-3349

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pure-ftpd FEDORA-2011-3349

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Fedora Update for pure-ftpd FEDORA-2011-3349 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:046)

A security flaw was discovered in pure-ftpd which allows plaintext command injection over TLS similar to CVE-2011-0411. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490...

Barracuda Networks Launches Bug Bounty Program for Security Products

Barracuda Networks announced on Tuesday that it will pay over $3,100 to anyone who can hack into its security products. This bug bounty program is the first of its kind from a pure-play security vendor. “This initiative reflects our commitment to our customers and the security community at large,...

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except:...

Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe

Exploit for unknown platform in category remote exploits ================================================== Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe ================================================== Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi...

Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow

No description provided by source. Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " host"...

SLES9: Security update for pure-ftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pure-ftpd More details may also be found by searching for keyword 5021146 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for pure-ftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pure-ftpd More details may also be found by searching for keyword 5021146 within the SuSE Enterprise Server 9 patch database linked in the references...

On the web Trojan automated analysis of two small ideas-vulnerability warning-the black bar safety net

Author: rayh4c 80sec Now online web Trojans and more are several sets of a fixed code, The changes are not many, including script code encryption methods, almost all is to explain the type of encryption, since the hack is performed the process of hanging horse, Inglés for the automated analysis o...

Unfixed XSS vulnerability at www.pure-red.com

Security researcher gamoscu, has submitted on 03/11/2009 a cross-site-scripting XSS vulnerability affecting www.pure-red.com, which at the time of submission ranked 4626675 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Use Md5Crack crack Serv-U password-vulnerability warning-the black bar safety net

Look at ServU password encryption storage method First randomly generate a 2-bit charactersfrom a-z lowercase characters. Then the user's original password with this 2-bit random character merge to become the new password character. Such as: the user's original password is a,The randomly generate...

Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes

No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...

Fedora Update for squirrelmail FEDORA-2008-9071

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2008-9071 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Gentoo Security Advisory GLSA 200407-04 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 200407-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...