x-diesel unreal commander 0.92 build573 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder.

X-diesel Unreal Commander 0.92 Build565 X-diesel Unreal Commander 0.92 Build573

1 EDB exploit

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service (infinite loop) by (1) repeatedly sending a 550 error response, or (2)...

X-diesel Unreal Commander 0.92 Build565 X-diesel Unreal Commander 0.92 Build573

Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote malicious users to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) ZIP or (2) RAR archive.

X-diesel Unreal Commander 0.92 Build565 X-diesel Unreal Commander 0.92 Build573

1 EDB exploit

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote malicious users to trick a user into performing a ...

X-diesel Unreal Commander 0.92 Build565 X-diesel Unreal Commander 0.92 Build573

Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted malicious users to obtain sensitive information (memory contents) by reading t...

X-diesel Unreal Commander 0.92 Build565 X-diesel Unreal Commander 0.92 Build573

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook