2705 matches found
CVE-2012-1399
Unspecified vulnerability in the U+Box 2.0 lg.uplusbox application 2.0.2 and 2.0.8.4 for Android has unknown impact and attack vectors...
CVE-2012-1400
Unspecified vulnerability in the U+Box 2.0 Pad lg.uplusbox.pad application 2.0.8.4 for Android has unknown impact and attack vectors...
CVE-2012-0364
CVE-2012-0364 affects Cisco Small Business SRP 500 Series devices (SRP 520/520W-U/540) with firmware older than 1.1.26 or 1.2.4, where an unauthenticated remote attacker could upload a configuration file via an unspecified URL, potentially replacing device configurations. The Cisco Security Advis...
CVE-2012-0365
Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified...
Unfixed XSS vulnerability at w3.u-grenoble3.fr
Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting w3.u-grenoble3.fr, which at the time of submission ranked 293797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...
CVE-2011-4800
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...
Directory traversal
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...
CVE-2011-4800
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...
CVE-2011-4800
CVE-2011-4800 affects Serv-U FTP Server up to 11.1.0.4. It is a directory-traversal flaw where a back-to-front path use ("..:/") in LIST, PUT, or GET commands enables remote authenticated users to read/write arbitrary files and list/create directories. Public exploits have been noted; CVSS ~9.0 (...
FTPS Cleartext Fallback Security Bypass
The remote FTPS server running on the remote host is affected by a security bypass vulnerability due to accepting unencrypted commands if SSL negotiations fail. A man-in-the-middle attacker can exploit this to intercept credentials and modify files. C Tenable Network Security, Inc...
KLA10322 RLF & WLF vulnerabilities in Serv-U
A directory traversal was found in Serv-U FTP Server. By exploiting this vulnerability malicious users can read and write arbitrary files. This vulnerability can be exploited remotely via a specially designed path. Original advisories - Exploitation Public exploits exist for this vulnerability...
Serv-U FTP server security vulnerabilities
Resource exhaustion, administrative session hijacking...
Vulnerabilities in Serv-U 11.1.0.3
Luigi Auriemma Application: Serv-U FTP http://www.serv-u.com Versions: = 11.1.0.3 Platforms: Windows, Linux bug B should affect only some Windows versions Bugs: A sockets and ports consumption B possible access to the management console Exploitation: remote Date: 03 Dec 2011 Author: Luigi Auriemm...
Serv-U数据连接处理拒绝服务和会话令牌漏洞
BUGTRAQ ID: 50906 Serv-U是一种使用广泛的FTP服务器程序。 Serv-U在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务并绕过某些安全限制。 1）在操作数据连接的监听套接字处理中存在错误，通过大量的FTP PASV命令，可耗尽可用的TCP端口，造成无法处理其他被动连接。 2）管理控制台会在管理员登录后生成较弱的会话令牌，这会允许枚举有效的令牌并通过FTP反弹攻击造成任意用户。成功利用此漏洞需要用户具有读写权限并让管理员打开控制台。 Serv-U 11.1.0.3 厂商补丁： RhinoSoft ---------...
Serv-U FTP Server 11.1.0.3 - Denial of Service Security Bypass
Serv-U FTP Server 11.1.0.3 - Denial of Service Security Bypass source: https://www.securityfocus.com/bid/50906/info Serv-U is prone to a denial-of-service vulnerability and a security-bypass vulnerability. Attackers can exploit these issues to perform denial-of-service attacks or gain unauthorize...
Serv-U FTP Server 11.1.0.3 - Denial of Service / Security Bypass
source: https://www.securityfocus.com/bid/50906/info Serv-U is prone to a denial-of-service vulnerability and a security-bypass vulnerability. Attackers can exploit these issues to perform denial-of-service attacks or gain unauthorized access to the affected application. Serv-U 11.1.0.3 and prior...
Serv-U FTP Server <4.2 Buffer Overflow
Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Serv-U FTP Server Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Serv-U FTP...
Serv-U FTPS Server命令通道SSL协商安全限制绕过漏洞
BUGTRAQ ID: 50881 Serv-U FTP是一款FTP服务程序。 RhinoSoft Serv-U FTPS Server实现上存在漏洞，虽然命令通道上SSL协商失败，但服务器还是让命令通道处于运行状态，可被利用执行中间人攻击 RhinoSoft Serv-U 9.4.0.0 RhinoSoft Serv-U 9.3.0.1 RhinoSoft Serv-U 9.2.0.1 RhinoSoft Serv-U 9.1.0.4 RhinoSoft Serv-U 9.1.0.2 RhinoSoft Serv-U 9.1.0.0 RhinoSoft Serv-U 9.0.0.1...
Serv-U FTP Server < 4.2 Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...