Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15228 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T19:50:16.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html - https://irssi.org/security/irssi_sa_2017_10.txt - http://openwall.com/lists/oss-security/2017/10/22/4
CVE ID: CVE-2017-15232 State: PUBLISHED Published: 2017-10-11T03:00:00 Last Updated: 2024-08-05T19:50:16.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3706-1/ - https://github.com/mozilla/mozjpeg/issues/268 - https://github.com/libjpeg-turbo/libjpeg-turbo/pull/182
CVE ID: CVE-2017-15235 State: PUBLISHED Published: 2017-10-11T03:00:00 Last Updated: 2024-08-05T19:50:16.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3454 - https://lists.debian.org/debian-lts-announce/2020/08/msg00050.html
CVE ID: CVE-2017-15236 State: PUBLISHED Published: 2017-10-11T03:00:00Z Last Updated: 2024-09-17T04:20:28.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config* files and extendword.txt. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3444
CVE ID: CVE-2017-15238 State: PUBLISHED Published: 2017-10-11T03:00:00 Last Updated: 2024-08-05T19:50:16.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, related to ReadJNGImage. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://sourceforge.net/p/graphicsmagick/bugs/469/ - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=df946910910d - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=93bdb9b30076 - https://lists.fedoraproject.org/archives/list/package-an
agick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=93bdb9b30076 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
CVE ID: CVE-2017-15239 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000040db4." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15239
CVE ID: CVE-2017-15240 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132cef." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15240
CVE ID: CVE-2017-15241 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000000929f5." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15241
CVE ID: CVE-2017-15242 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "User Mode Write AV starting at PDF!xmlGetGlobalState+0x0000000000031abe." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15242
CVE ID: CVE-2017-15243 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x00000000000568a4." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15243
CVE ID: CVE-2017-15244 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15244
CVE ID: CVE-2017-15245 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlGetGlobalState+0x0000000000057b76." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15245
CVE ID: CVE-2017-15246 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x000000000001515b." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15246
CVE ID: CVE-2017-15247 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000001168a1." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15247
CVE ID: CVE-2017-15248 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x0000000000063ca6." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15248
CVE ID: CVE-2017-15249 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x00000000000668d6." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15249
CVE ID: CVE-2017-15250 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132e19." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15250
CVE ID: CVE-2017-15251 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x00000000000e7326." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15251
CVE ID: CVE-2017-15252 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x00000000000158cb." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15252
CVE ID: CVE-2017-15253 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "User Mode Write AV starting at PDF!xmlGetGlobalState+0x000000000007dff2." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15253
CVE ID: CVE-2017-15254 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlGetGlobalState+0x000000000007dfa5." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15254
CVE ID: CVE-2017-15255 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlParserInputRead+0x00000000001601b0." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15255
CVE ID: CVE-2017-15256 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x0000000000019fc8." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15256
CVE ID: CVE-2017-15257 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x000000000009174a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15257
CVE ID: CVE-2017-15258 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000161a9c." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15258
CVE ID: CVE-2017-15259 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x000000000011624a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15259
CVE ID: CVE-2017-15260 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000129a59." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15260
CVE ID: CVE-2017-15261 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x0000000000057b35." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15261
CVE ID: CVE-2017-15262 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x0000000000048d0c." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15262
CVE ID: CVE-2017-15263 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x00000000000166c4." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15263
CVE ID: CVE-2017-15264 State: PUBLISHED Published: 2017-10-11T18:00:00 Last Updated: 2024-08-05T19:50:16.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at image00000000_00400000+0x00000000000236e4." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15264
CVE ID: CVE-2017-15265 State: PUBLISHED Published: 2017-10-16T18:00:00 Last Updated: 2024-08-05T19:50:16.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/10/11/3 - http://www.securityfocus.com/bid/101288 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https:/
- http://www.securityfocus.com/bid/101288 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://access.redhat.com/errata/RHSA-2018:2390 - http://www.securitytracker.com/id/1039561 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:3823 - https://access.redhat.com/errata/RHSA-2018:0676 - http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html - https://access.redhat.com/errata/RHSA-2018:1170 - https://usn.ubuntu.com/3698-1/ - https://access.redhat.com/errata/RHSA-2018:1130 - https://access.redhat.com/errata/RHSA-2018:3822 - https://usn.ubuntu.com/3698-2/ - https://www.oracle.com/security-alerts/cpujul20
cess.redhat.com/errata/RHSA-2018:3822 - https://usn.ubuntu.com/3698-2/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8 - https://bugzilla.suse.com/show_bug.cgi?id=1062520 - https://source.android.com/security/bulletin/2018-02-01
CVE ID: CVE-2017-15266 State: PUBLISHED Published: 2017-10-11T17:00:00 Last Updated: 2024-08-05T19:50:16.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1499599 - http://openwall.com/lists/oss-security/2017/10/11/1 - http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html - https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html - http://www.securityfocus.com/bid/101271
CVE ID: CVE-2017-15267 State: PUBLISHED Published: 2017-10-11T17:00:00 Last Updated: 2024-08-05T19:50:16.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101272 - http://openwall.com/lists/oss-security/2017/10/11/1 - http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00003.html - https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=1499600
CVE ID: CVE-2017-15268 State: PUBLISHED Published: 2017-10-12T15:00:00 Last Updated: 2024-08-05T19:50:16.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4213 - https://access.redhat.com/errata/RHSA-2018:0816 - http://www.securityfocus.com/bid/101277 - https://access.redhat.com/errata/RHSA-2018:1104 - https://bugs.launchpad.net/qemu/+bug/1718964 - https://usn.ubuntu.com/3575-1/ - https://lists.gnu.org/archive/html/qemu-devel/2
/bugs.launchpad.net/qemu/+bug/1718964 - https://usn.ubuntu.com/3575-1/ - https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02278.html
CVE ID: CVE-2017-15269 State: PUBLISHED Published: 2017-11-15T16:00:00 Last Updated: 2024-08-05T19:50:16.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html - http://www.securityfocus.com/archive/1/541518/100/0/threaded - https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/
CVE ID: CVE-2017-15270 State: PUBLISHED Published: 2017-11-15T16:00:00 Last Updated: 2024-08-05T19:50:16.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to hide data in the Graphical User Interface (GUI) view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' and '\r' are not escaped and can be used to add new entries to the log. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-Aft
Container: References: - http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html - http://www.securityfocus.com/archive/1/541518/100/0/threaded - https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/ - https://www.exploit-db.com/exploits/43144/