Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
netbsd tnftpd vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-45198
ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) prior to 20231001 is also vulnerable.
Netbsd Tnftpd
Netbsd Ftpd
445
VMScore
CVE-2015-5917
The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X prior to 10.11, allows remote malicious users to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances o...
Netbsd Tnftpd
910
VMScore
CVE-2006-6652
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current prior to 20050914, NetBSD 2.* and 3.* prior to 20061203, and Apple Mac OS X prior to 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a lon...
Apple Mac Os X 10.0.2
Apple Mac Os X 10.0.3
Apple Mac Os X 10.0.4
Apple Mac Os X 10.1
Apple Mac Os X 10.2.8
Apple Mac Os X 10.3
Apple Mac Os X 10.3.1
Apple Mac Os X 10.3.2
Apple Mac Os X 10.4.6
Apple Mac Os X 10.4.7
Apple Mac Os X 10.4.8
Apple Mac Os X 10.4.9
Apple Mac Os X 10.1.5
Apple Mac Os X 10.2
Apple Mac Os X 10.2.1
Apple Mac Os X 10.2.2
Apple Mac Os X 10.2.3
Apple Mac Os X 10.3.7
Apple Mac Os X 10.3.8
Apple Mac Os X 10.3.9
Apple Mac Os X 10.4
Apple Mac Os X 10.0
2 EDB exploits
454
VMScore
CVE-2004-0794
Multiple signal handler race conditions in lukemftpd (aka tnftpd prior to 20040810) allow remote authenticated malicious users to cause a denial of service or execute arbitrary code.
Luke Mewburn Lukemftp 1.1
Luke Mewburn Lukemftp 1.5
Luke Mewburn Tnftpd 2003-12-17
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started