WinSCP unfiltered shell characters security vulnerability

Shell characters problem on sftp:// and scp:// URL handlers...

WinSCP URL Protocol Handler Arbitrary File Transfer

According to its version, the installation of WinSCP on the remote host fails to completely sanitize input to the SCP and SFTP protocol handlers. If an attacker can trick a user on the affected host into clicking on a malicious link, a file transfer can be initiated to or from the affected host. ...

CVE-2007-4263

Unspecified vulnerability in the server side of the Secure Copy SCP implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors...

CVE-2007-4263

Cisco IOS Secure Copy (SCP) server-side vulnerability (CVE-2007-4263) allows any authenticated user to read, write, or overwrite arbitrary files on devices running 12.2-based IOS via unspecified vectors. The issue is described as an authorization bypass in Cisco’s advisory; the vulnerability impa...

CVE-2007-4263

Unspecified vulnerability in the server side of the Secure Copy SCP implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors...

Cisco IOS SCPauthentication bypass

Unprivileged user has full access to device, incpuding reading and writing it's configuration...

Format string

Format string vulnerability in the SCP module in Ipswitch WSFTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WSFTP script command...

CVE-2007-0665

CVE-2007-0665 affects Ipswitch WS_FTP 2007 Professional’s SCP module. The vulnerability is a format string flaw in the handling of filenames, related to the SHELL WS_FTP script command, which could allow remote attackers to execute arbitrary commands. The NVD entry lists a CVSSv2 base score of 6....

Ipswitch WS_FTP 2007 SCP处理格式串漏洞

Ipswitch WSFTP是一款FTP服务程序。 Ipswitch WSFTP包含的SCP模块存在格式串问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 打开特殊构建的SCP文件，WSFTP 2007脚本会导致格式串错误。特殊构建文件使用WSFTP脚本命令"SHELL"和执行特殊文件名。文件使用"file://"访问。 Ipswitch WS FTP Server Professional 2007 目前没有解决方案提供,请关注以下链接： http://www.ipswitch.com/products/wsftp/home/index.asp...

IPSwitch WS_FTP unfilterd shell characters security vulnerability

Shell charCters problem on SCP files parsing...

WS_FTP 2007 Professional SCP handling format string vulnerability

Synopsis: WSFTP 2007 Professional SCP handling format string vulnerability Product: WSFTP 2007 Professional Vendor: Ipswitch I. Background "..Transfer files anywhere, anytime, with complete security. Lightning fast transfer speeds Industry leading security Time saving features include schedule,...

Important: Red Hat Security Advisory: openssh security update

Updated openssh packages that fix several security issues in sshd are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package...

RHEL 3 : openssh (RHSA-2006:0298)

Updated openssh packages that fix bugs in sshd are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files...

FreeBSD : scponly -- local privilege escalation exploits (b5a49db7-72fc-11da-9827-021106004fd6)

Max Vozeler reports : If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local privilege escalation exploit : - the chrooted setuid scponlyc binary is installed - regular non-scponly users have interactive shell access to the box - a user...

Ubuntu 4.10 / 5.04 / 5.10 : openssh vulnerability (USN-255-1)

Tomas Mraz discovered a shell code injection flaw in scp. When doing local-to-local or remote-to-remote copying, scp expanded shell escape characters. By tricking an user into using scp on a specially crafted file name which could also be caught by using an innocuous wild card like '', an attacke...

RHEL 4 : openssh (RHSA-2006:0044)

Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This...

Low: Red Hat Security Advisory: openssh security update

Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This...

USN-255-1: openssh vulnerability

Tomas Mraz discovered a shell code injection flaw in scp. When doing local-to-local or remote-to-remote copying, scp expanded shell escape characters. By tricking an user into using scp on a specially crafted file name which could also be caught by using an innocuous wild card like '', an attacke...

GLSA-200602-11 : OpenSSH, Dropbear: Insecure use of system() call

The remote host is affected by the vulnerability described in GLSA-200602-11 OpenSSH, Dropbear: Insecure use of system call To copy from a local filesystem to another local filesystem, scp constructs a command line using 'cp' which is then executed via system. Josh Bressers discovered that specia...

OpenSSH, Dropbear: Insecure use of system() call

Background OpenSSH is a free application suite consisting of server and clients that replace tools like telnet, rlogin, rcp and ftp with more secure versions offering additional functionality. Dropbear is an SSH server and client designed with a small memory footprint that includes OpenSSH scp...