Vulnerabilities > Attachmate
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-02-06 | CVE-2014-0605 | Path Traversal vulnerability in Attachmate Reflection FTP Client Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method. | 10.0 |
| 2015-02-06 | CVE-2014-0604 | Path Traversal vulnerability in Attachmate Reflection FTP Client Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method. | 10.0 |
| 2015-02-06 | CVE-2014-0603 | Code Injection vulnerability in Attachmate Reflection FTP Client The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of an arbitrary memory address. | 10.0 |
| 2015-01-27 | CVE-2014-5211 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Attachmate Reflection FTP Client 14.1.429 Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response. | 6.8 |
| 2014-07-24 | CVE-2014-0607 | Arbitrary File Upload vulnerability in Attachmate Verastream Process Designer 6.0 Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to execute arbitrary code by uploading and launching an executable file. | 10.0 |
| 2013-11-06 | CVE-2013-3626 | Path Traversal vulnerability in Attachmate Verastream Host Integrator Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message. | 9.3 |
| 2012-09-06 | CVE-2011-5157 | DLL Loading Arbitrary Code Execution vulnerability in Attachmate Reflection Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. local attachmate | 6.9 |
| 2011-12-25 | CVE-2011-5012 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Attachmate products Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command. | 10.0 |
| 2010-11-02 | CVE-2010-4146 | Cross-Site Scripting vulnerability in Attachmate Reflection FOR the web Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2009-02-02 | CVE-2008-6021 | Security vulnerability in Attachmate Reflection for Secure IT 7.0 Multiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and Server before 7.0 SP1 have unknown impact and attack vectors, aka "security vulnerabilities found by 3rd party analysis." | 10.0 |