CVE-2005-0277

The CVE-2005-0277 entry describes a buffer overflow in the 3Com 3CDaemon 2.0 FTP server (revision 10) that allows remote denial of service and arbitrary code execution via (1) a long USER username or (2) an FTP command with a long argument (e.g., cd, send, ls). Connected documents confirm concret...

CVE-2005-0278

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

CVE-2005-0276

CVE-2005-0276 : The 3Com 3CDaemon 2.0 revision 10 FTP service is affected by multiple format string vulnerabilities in commands (username, cd, delete, rename, rmdir, literal, stat, CWD) that can cause a remote denial of service (application crash). This assessment is based on the NVD description;...

CVE-2005-0278

The CVE-2005-0278 entry concerns the FTP service of 3Com 3CDaemon/3CServer (2.0, revision 10). A remote attacker can trigger an information disclosure by issuing a CD command containing an MS-DOS device name, causing an error message that reveals the installation path. Affected component is the F...

CVE-2005-0275

The CVE-2005-0275 entry concerns 3Com 3CDaemon 2.0 revision 10, where TFTP handling allows remote denial of service via a GET request containing an MS-DOS device name. The issue is triggered by a crafted TFTP GET and results in an application crash, constituting partial availability impact. The s...

3Com 3CServer/3CDaemon FTP Server Multiple Vulnerabilities (OF, FS, PD, DoS)

The remote host is running the 3Com 3CServer or 3CDaemon FTP server. According to its banner, the version of the 3CServer / 3CDaemon FTP server on the remote host is reportedly affected by multiple buffer overflow and format string vulnerabilities as well as an information leak issue. An attacker...

Vulnerability in 3Com 3CServer v1.1

Object: Vulnerability in 3CServer v1.1, free utility for windows32, from 3Com. Details: While old, this free utility is still proposed from the 3Com site, so it's worth mentionning this. There are buffer overflows in many of the FTP commands supported, leading to various heap overflows. The...

3Com 3CServer FTP Server < 2.0 Remote Overflow

Binary data 2595.prm...

3CServer 1.1 (FTP Server) - Remote Overflow

3CServer 1.1 FTP Server - Remote Overflow / subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore,...

CVE-2005-0112

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point AP 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the 1 config.bin 2 profile.wlp?PN=ggg or 3...

CVE-2005-0112

CVE-2005-0112 affects the 3Com OfficeConnect Wireless 11g AP. The web-based admin interface allowed unauthenticated remote access to sensitive data via URLs (/main/config.bin, /main/profile.wlp?PN=ggg, /main/event.logs), bypassing login and exposing credentials, WEP key, SSID, and router logs. Vu...

iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability

3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability iDEFENSE Security Advisory 01.20.05 www.idefense.com/application/poi/display?id=188&type=vulnerabilities January 20, 2005 I. BACKGROUND The 3Com OfficeConnect Wireless 11g Access Point provides users with access to network...

3Com 3CDaemon multipe bugs

Format string bugs, buffer overflows, DoS...

3Com 3CDaemon Multiple Vulnerabilities

3Com 3CDaemon Multiple Vulnerabilities By Sowhat 04.JAN.2005 http://secway.org/advisory/ad20041011.txt I.T.S Security Research Team Product Affected: 3Com 3CDaemon 2.0 revision 10 Vendor: www.3Com.com 1 BACKGROUD 3CDaemon is a free popular TFTP, FTP, and Syslog daemon for Microsoft Windows...

ad20041011.txt

3Com 3CDaemon Multiple Vulnerabilities By Sowhat 04.JAN.2005 http://secway.org/advisory/ad20041011.txt I.T.S Security Research Team Product Affected: 3Com 3CDaemon 2.0 revision 10 Vendor: www.3Com.com 1 BACKGROUD 3CDaemon is a free popular TFTP, FTP, and Syslog daemon for Microsoft Windows...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

CVE-2004-2457

Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service crash via a large amount of UDP traffic...

CVE-2004-0477

Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password. NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447. This...

[Full-Disclosure] 3COM 3crwe754g72-a Information Disclosure, Logs manipulation ...

Title: 3com 3crwe754g72-a Information Disclosure Class: Design Error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0000 Release Date: 2004 10 18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle product which...

[Full-Disclosure] 3COM 3crwe754g72-a Administration interface code injection &#40;DHCP&#41;

Title: 3COM 3crwe754g72-a Administration interface code injection Class: Design error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0001 Release Date: 2004-10-18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle...