TurboFTP Server 1.20.745 - Directory Traversal

source: https://www.securityfocus.com/bid/40919/info TurboFTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to download or upload arbitrary files outside the root directory. This ma...

Core FTP Server 1.0 Build 347 Denial Of Service

Date of Discovery: 6-Jun-2010 Credits: leinakesiatgmail.com Vendor: Core FTP Affected: Core FTP Server 1.0 build 347. Earlier versions may also be affected. Overview: Core FTP Server is software for Windows that allows you to exchange files with others via networks and the internet. Core FTP Serv...

Core FTP mini-sftp-server Several DoS and Directory Traversal Vulnerabilities

Date of Discovery: 7-Jun-2010 Credits: leinakesiatgmail.com Vendor: Core FTP mini-sftp-server http://www.coreftp.com/server/index.html Affected: Core FTP mini-sftp-server version 1.19. Earlier versions may also be affected. Overview: "Core FTP Server" and "Core FTP mini-core sftp server" are both...

Core FTP Server(SFTP module) 'open' and 'stat' Commands Remote Denial of Service Vulnerability

Date of Discovery: 6-Jun-2010 Credits: leinakesiatgmail.com Vendor: Core FTP Affected: Core FTP Server 1.0 build 347. Earlier versions may also be affected. Overview: Core FTP Server is software for Windows that allows you to exchange files with others via networks and the internet. Core FTP Serv...

Core FTP mini-sftp-server 1.19 Denial Of Service / Traversal

Date of Discovery: 7-Jun-2010 Credits: leinakesiatgmail.com Vendor: Core FTP mini-sftp-server http://www.coreftp.com/server/index.html Affected: Core FTP mini-sftp-server version 1.19. Earlier versions may also be affected. Overview: "Core FTP Server" and "Core FTP mini-core sftp server" are both...

CentOS 5 : lftp (CESA-2009:1278)

An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file transfer program for the FTP and HTTP protocols. Lik...

CentOS 5 : openssh (CESA-2009:1287)

Updated openssh packages that fix a security issue, a bug, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure Shell protocol implementation. These...

Directory traversal

Directory traversal vulnerability in ls.php in LittleSite aka LS or LittleSite.php 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

FireFTP Extension for Firefox SFTP Filename Handling Vulnerability

该漏洞是由于不正确的FireFTP之前将它们传递给psftp.exe某些文件名。这可以被利用来如欺骗用户下载到fire安装目录中的文件或执行通过SFTP服务器上的文件，不需要特别命名SFTP发布业务用户。 成功攻击要求攻击者可以诱骗受害者移动，删除，模式发生变化，或下载一个SFTP服务器特别命名的文件。 据该漏洞在版本1.0.5。其它版本也可能受到影响。 FireFTP 1.x extension for Firefox Update to version 1.0.6. http://fireftp.mozdev.org/...

CVE-2009-3478

Argument injection vulnerability in 1 src/content/js/connection/sftp.js and 2 src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename...

CVE-2009-3478

Argument injection vulnerability in 1 src/content/js/connection/sftp.js and 2 src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename...

CVE-2009-3478

FireFTP Extension 1.0 for Firefox is affected by CVE-2009-3478. An argument injection flaw arises from improper filtering/encoding of a double quote in filenames when FireFTP builds the command to psftp.exe, allowing remote authenticated SFTP users to cause victims to alter permissions, delete, d...

lftp security update

CentOS Errata and Security Advisory CESA-2009:1278 An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file...

openssh security, bug fix, and enhancement update

4.3p2-36 - tiny change in chroot sftp capability into openssh-server solve ls speed problem 440240 4.3p2-35 - workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 502230 4.3p2-34 - disable protocol 1 in the FIPS mode 4.3p2-33 - fix scp hangup on exit 454812 - call integrity...

Low: Red Hat Security Advisory: openssh security, bug fix, and enhancement update

Updated openssh packages that fix a security issue, a bug, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure Shell protocol implementation. These...

Low: Red Hat Security Advisory: lftp security and bug fix update

An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file transfer program for the FTP and HTTP protocols. Lik...

RHEL 5 : openssh (RHSA-2009:1287)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:1287 advisory. OpenSSH is OpenBSD's SSH Secure Shell protocol implementation. These packages include the core files necessary for both the OpenSSH client and server...

RHEL 5 : lftp (RHSA-2009:1278)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1278 advisory. LFTP is a sophisticated file transfer program for the FTP and HTTP protocols. Like bash, it has job control and uses the readline library for input. ...

CVE-2008-6899

Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service crash and execute arbitrary code via a long 1 open, 2 unlink, 3 mkdir, 4 rmdir, or 5 stat SFTP command...

Buffer overflow

Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service crash and execute arbitrary code via a long 1 open, 2 unlink, 3 mkdir, 4 rmdir, or 5 stat SFTP command...