Golden FTP Server 4.70 - 'PASS' Buffer Overflow

GoldenFTP 4.70 PASS Exploit Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on XP SP3 Vendor Contacted: 1/17/2011 no response For this exploit to work correctly, you need to know the subnet that the server is running on. You also need to make sure that "show new...

ProFTPD Telnet IAC buffer overflow

Added: 01/21/2011 CVE: CVE-2010-4221 BID: 44562 OSVDB: 68985 Background ProFTPD is free FTP Server software for Unix and Linux platforms. Problem A buffer overflow vulnerability in ProFTPD allows remote attackers to execute arbitrary commands by sending a TELNETIAC escape sequence to the FTP...

ProFTPD Telnet IAC buffer overflow

Added: 01/21/2011 CVE: CVE-2010-4221 BID: 44562 OSVDB: 68985 Background ProFTPD is free FTP Server software for Unix and Linux platforms. Problem A buffer overflow vulnerability in ProFTPD allows remote attackers to execute arbitrary commands by sending a TELNETIAC escape sequence to the FTP...

ProFTPD Telnet IAC buffer overflow

Added: 01/21/2011 CVE: CVE-2010-4221 BID: 44562 OSVDB: 68985 Background ProFTPD is free FTP Server software for Unix and Linux platforms. Problem A buffer overflow vulnerability in ProFTPD allows remote attackers to execute arbitrary commands by sending a TELNETIAC escape sequence to the FTP...

ProFTPd 1.3.2 rc3 < 1.3.3b (Linux) - Telnet IAC Buffer Overflow (Metasploit)

$Id: proftptelnetiac.rb 11525 2011-01-09 23:33:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security...

CVE-2010-4675

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security...

CVE-2010-4675

Cisco ASA 5500 series devices running versions prior to 8.2(3) are affected by CVE-2010-4675 due to a bug (CSCsv40504) that causes improper determination of which interfaces TELNET connections should be permitted. This can allow remote authenticated users to bypass intended access restrictions by...

CVE-2010-4507

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

CVE-2010-4507

CVE-2010-4507 affects Clear iSpot / ClearSpot 2.0.0.0 (R1679) and ClearSpot 2.0.0.0 (R1512/R1786) with firmware 1.9.9.4. Trustwave SpiderLabs TWSL2010-008 documents multiple CSRF vulnerabilities in webmain.cgi (act_cmd_result, act_network_set, act_set_wimax_etc_config) and upgrademain.cgi (act_fi...

CVE-2010-4507

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

Microsoft Windows IIS FTP Server DOS Vulnerability

Microsoft IIS with FTP server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: Telnet Brute

This script attempts to get Telnet login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org telnet-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaptelnetbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Telnet Brute NSE...

Microsoft Windows IIS FTP Server DOS Vulnerability

This host is running Microsoft IIS with FTP server and is prone to Denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbmsiisftpddosvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft Windows IIS FTP Server DOS Vulnerability Authors: Sooraj KS Updated By : Sooraj KS on 2011-04-12...

Nmap NSE: Telnet Brute

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for krb5-appl MDVA-2010:236 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVA-2010:236 krb5-appl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

PT-2010-5205

Name of the Vulnerable Software and Affected Versions Microsoft FTP Service versions 7.0 through 7.5 for Internet Information Services IIS 7.0 and 7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FTP command. This is due to a...

Mandriva Update for krb5-appl MDVA-2010:236 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVA-2010:236 krb5-appl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...