altools vulnerabilities and exploits

(subscribe to this query)

NA

Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote malicious users to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value mu...

Altools Alpass 3.02 Altools Alpass 2.7

NA

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote malicious users to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.

Altools Alpass 2.7 Altools Alpass 3.02

6.1

CVSSv3

ALSong 3.46 and previous versions version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Album(sab) file.

Altools Alsong

7.8

CVSSv3

ALTOOLS update service 18.1 and previous versions versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system pr...

Estsoft Altools

NA

Directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote malicious users to create arbitrary directories via directory traversal sequences in a MKD request. NOTE: the provenance of this information is unknown; details are obtai...

Altools Alftp Ftp Server 4.1 Beta1

NA

Unspecified vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, probably due to response messages. NOTE: the provenance of this information is...

Altools Alftp Ftp Server 4.1 Beta1

NA

Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for c...

Estsoft Alftp 5.0 Estsoft Alftp 4.1

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook