[SECURITY] Fedora 15 Update: rssh-2.3.3-1.fc15

rssh is a restricted shell for use with OpenSSH, allowing only scp and/or sftp. For example, if you have a server which you only want to allow users to copy files off of via scp, without providing shell access, you can use rssh to do that. It is a alternative to scponly...

Debian: Security Advisory (DSA-2185-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wing FTP Server SFTP Connection Unspecified DoS

The remote FTP server is running a version of Wing FTP Server earlier than 3.8.0. Such versions reportedly are affected by a denial of service vulnerability that can be triggered when handling SFTP connections. A remote, unauthenticated attacker may be able to leverage this issue to crash the...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

CVE-2011-1137 is an integer overflow in ProFTPD’s mod_sftp that affects 1.3.3d and earlier, triggered by a malformed SSH message and causing memory exhaustion/DoS. The issue is in the mod_sftp code path, with remote attackers able to induce high memory use potentially leading to OOM. Public detai...

Debian DSA-2185-1 : proftpd-dfsg - integer overflow

It was discovered that an integer overflow in the SFTP file transfer module of the ProFTPD daemon could lead to denial of service. The oldstable distribution lenny is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

ProFTPD integer overflow

Integer overflow in SFTP module...

[SECURITY] [DSA 2185-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2185-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 07, 2011 http://www.debian.org/security/faq -...

DSA-2185-1 proftpd-dfsg - integer overflow

Bulletin has no description...

Code injection

The 1 remoteglob function in sftp-glob.c and the 2 processput function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob...

CVE-2010-4755

The 1 remoteglob function in sftp-glob.c and the 2 processput function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob...

Fedora 14 : proftpd-1.3.3d-1.fc14 (2011-0610)

This is an update to the current upstream maintenance release, which addresses a security issue that could affect users of the modsql module not enabled by default. - A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the...

Fedora 13 : proftpd-1.3.3d-1.fc13 (2011-0613)

This is an update to the current upstream maintenance release, which addresses a security issue that could affect users of the modsql module not enabled by default. - A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the...

[SECURITY] Fedora 14 Update: bareftp-0.3.7-1.fc14

bareFTP is a file transfer client supporting the FTP, FTP over SSL/TLS FTP S and SSH File Transfer Protocol SFTP. It is written in C, targeting the M ono framework and the GNOME desktop environment. bareFTP is free and open source software released under the terms of the GPL license...

Serv-U < 10.3.0.1 SFTP Authentication Bypass

According to its banner, the installed version of Serv-U is earlier than 10.3.0.1 and is, therefore, potentially affected by the following issue : - If the SFTP server has been configured to only allow public key authentication, it can be bypassed for users accounts that have no password. C Tenab...

Serv-U < 10.3.0.1 SFTP Server Authentication Bypass Vulnerability

Binary data 5712.prm...

CVE-2010-2695

Xlight FTP Server 3.x is affected by a directory traversal vulnerability in the SFTP/SSH2 virtual server. Versions 3.5.0 and 3.5.5 (and possibly others) before 3.6 allow remote authenticated users to read, overwrite, or delete arbitrary files by crafting .. sequences in commands such as ls, rm, r...

XLight FTP Server 3.x SFTP Directory Traversal

According to its SSH banner, the version of XLight FTP server listening on the remote host is potentially affected by a directory traversal vulnerability in its SFTP service. A remote, authenticated attacker, exploiting this flaw, can read and modify arbitrary files on the remote host. Note that...