Skip to content
OpenAdvisories

Vendor

NetSarang Computer

2 known vulnerabilities.

Products

Xmanager Enterprise 1 Xmanager 1 Xshell 1 Xftp 1 Xlpd 1 Xftp FTP Client 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2017-20203

    NetSarang v5.0 Malicious Backdoor Supply Chain Compromise

    NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS…

    NetSarang Computer Xmanager Xftp Xmanager Enterprise
  • Critical 9.3
    CVE-2010-20122 Public exploit

    Xftp FTP Client <= 3.0 PWD Response Buffer Overflow

    Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory str…

    NetSarang Computer Xftp FTP Client