Acronis Snap Deploy 安全漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis. Acronis Snap Deploy is vulnerable to an elevation of privilege vulnerability that could be exploited by an attacker to cause a local elevation of privilege...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is an Acronis platform for bulk deployment of system images. Acronis Snap Deploy is vulnerable to a DLL hijacking vulnerability, which originates when a process attempts to load a DLL without specifying the absolute path to the DLL, and can be exploited by an attacker to cause...

Acronis Snap Deploy 安全漏洞

Acronis Snap Deploy, an Acronis platform for bulk deployment of system images, is vulnerable to an elevation of privilege vulnerability that stems from assigning too many privileges to child processes, which could be exploited by an attacker to cause a local elevation of privilege...

CVE-2022-30697

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 3640...

CVE-2022-30695

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deploy Windows before build 3640...

Directory traversal

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

Null pointer dereference

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

CVE-2008-1410

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

CVE-2008-1411

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

CVE-2008-1411

The CVE-2008-1411 entry affects the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier. The issue is a denial of service (crash) caused by an incomplete TFTP request that triggers a NULL pointer dereference in the PXE server. This is the explicit vulnerability described in the ...

CVE-2008-1410

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

CVE-2008-1411

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

Acronis Snap Deploy PXE Server TFTP目录遍历和拒绝服务漏洞

BUGTRAQ ID: 28182 CNCAN ID:CNCAN-2008031101 Acronis PXE Server是一款Acronis Snap Deploy服务器的组建，用于配置管理。 Acronis PXE Server不正确处理用户提交的请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务或目录遍历攻击。 PXE Server pxesrv.exe实现的TFTP服务器目录"../"字符缺少过滤，可导致目录遍历问题，以应用程序权限查看系统文件内容。 不完全的TFTP请求可导致NULL指针访问而使系统崩溃。 Acronis Snap Deploy 2.0.0.1076...