CVE-2002-2300

CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...

CVE-2007-2300

CVE-2007-2300 affects Endy Kristanto Surat kabar / News Management Online (phpwebnews) 0.2 and earlier. The vulnerability is a Cross-Site Scripting (XSS) flaw in the m_txt parameter that can be exploited via iklan.php, index.php, or bukutamu.php to inject arbitrary web script/HTML. Affected compo...

CVE-2006-2300

CVE-2006-2300 involves multiple SQL injection flaws in EImagePro. The vulnerabilities allow remote attackers to execute arbitrary SQL via (1) CatID in subList.asp, (2) SubjectID in imageList.asp, or (3) Pic in view.asp. Affected software is EImagePro, with the underlying issue being improper hand...

CVE-2005-3661

Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to advpassword.asp...

CVE-2005-3661

Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to advpassword.asp...

CVE-2005-3661

CVE-2005-3661 describes a vulnerability in the Dell TrueMobile 2300 Wireless Broadband Router. Affected firmware versions include 3.0.0.8 and 5.1.1.6 (and possibly others). The issue allows remote attackers to reset authentication credentials and then modify configuration or upload firmware by se...

Dell TrueMobile 2300 wireless routers authentication bypass

It's possible to access some web interface functions without authentication...

CVE-2005-3661: Undefined Security Weakness

Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to advpassword.asp...

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability

Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability iDefense Security Advisory 12.07.05 www.idefense.com/application/poi/display?id=348&type=vulnerabilities December 7, 2005 I. BACKGROUND The Dell TrueMobile 2300 Wireless Broadband Router is an 802.11b/g wireless...

Dell TrueMobile 2300 - Remote Credential Reset

Dell TrueMobile 2300 - Remote Credential Reset source: https://www.securityfocus.com/bid/15770/info It is possible for remote attackers to gain control of a target TrueMobile 2300 running firmware versions 3.0.0.8 and 5.1.1.6. Other versions are likely affected. The vulnerability appears to be in...

Dell TrueMobile 2300 - Remote Credential Reset

source: https://www.securityfocus.com/bid/15770/info It is possible for remote attackers to gain control of a target TrueMobile 2300 running firmware versions 3.0.0.8 and 5.1.1.6. Other versions are likely affected. The vulnerability appears to be in an administrative component accessed through t...

CVE-2004-2300

The CVE-2004-2300 entry concerns a buffer overflow in snmpd for ucd-snmp 4.2.6 and earlier when run as root-setuid. Local users could potentially execute arbitrary code via a long -p argument. Multiple sources (Red Hat, Debian security tracker, NVD) reiterate the same description; there is explic...

CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...