44 matches found
Command injection
The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...
CVE-2007-4390
The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...
CVE-2007-4390
The CVE-2007-4390 issue affects BlueCat Networks Adonis DNS/DHCP appliance (CLI/Adonis Administration Console) version 5.0.2.8. The vulnerability allows local admin users to gain root privileges on the underlying OS by injecting shell metacharacters in a command. Documents confirm the affected co...
TS-2007-003-0.txt
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...
TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...
CVE-2007-4390: Undefined Security Weakness
The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...
BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation
BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation source: https://www.securityfocus.com/bid/25342/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability because the software fails to properly sanitize user-supplied input. An attacker with...
BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation
source: https://www.securityfocus.com/bid/25342/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability because the software fails to properly sanitize user-supplied input. An attacker with administrative privileges can exploit this issue to execute arbitrary...
Directory traversal
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...
CVE-2007-4226
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...
CVE-2007-4226
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...
CVE-2007-4226
CVE-2007-4226 describes a directory traversal in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8). The vulnerability allows remote authenticated administrators with certain TFTP privileges to create and overwrite arbitrary files through a .. in a pathname, w...
Denial of service
XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...
CVE-2007-4205
XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...
CVE-2007-4205
XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...
CVE-2007-4205
CVE-2007-4205 affects XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8. The issue allows a remote attacker to trigger a denial-of-service by sending a UDP packet to port 694, crashing the heartbeat control process. The description notes this may be the same vulnerability a...
CVE-2007-4226: Undefined Security Weakness
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...
CVE-2007-4205: Undefined Security Weakness
XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...
BlueCat Networks Proteus TFTP文件远程权限提升漏洞
BUGTRAQ ID: 25214 Proteus是企业级的IP地址管理设备。 Proteus的TFTP服务器实现上存在漏洞，远程攻击者可能利用此漏洞获取服务器的root用户权限。 可以使用Proteus向所管理的Adonis设备上传文件，管理员可以命名TFTP文件，但没有对用户输入（如相对路径）执行数据验证。所上传的文件仅可拷贝到/tftpboot/目录，且文件拷贝是以root用户权限执行的，因此名为../etc/shadow的文件可以覆盖影子口令数据库/etc/shadow。 Bluecat Networks Proteus 2.0.2.0 Bluecat Networks Adon...
TS-2007-002-0.txt
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis root Privilege Access Date: 2007-08-06 Advisory ID: TS-2007-002-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact Exploit...