OSClass 2.3.5 Directory Traversal

Advisory ID: CSA-12004 Title: OSClass directory traversal vulnerability Product: OSClass Version: 2.3.5 and probably prior Vendor: osclass.org Vulnerability type: Directory traversal Risk level: 2 / 3 Credit: www.codseq.it Vendor notification: 2012-01-25 Public disclosure: 2012-03-07 Original...

CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

Information disclosure

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

CVE-2011-4723

CVE-2011-4723 affects the D-Link DIR-300 router. The vulnerability is information disclosure due to cleartext password storage in the device, enabling context-dependent attackers to obtain sensitive credentials. Root cause is lack of password hashing/storage of passwords in plaintext. Public sour...

CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2011-5054

Name of the Vulnerable Software and Affected Versions D-Link DIR-300 affected versions not specified Description The issue allows context-dependent attackers to obtain sensitive information via unspecified vectors because the router stores cleartext passwords. Recommendations At the moment, there...

CVE-2011-4723: Cleartext Storage of Sensitive Information

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

Ipswitch TFTP Server Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits Title : Ipswitch TFTP Server Directory Traversal Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.whatsupgold.com/index.aspx Advisory : http://secpod.org/blog/?p=424...

CVE-2011-4507

The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi device...

Authentication flaw

The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi device...

CVE-2011-4507

The CVE-2011-4507 entry concerns the D-Link DIR-685 router, where certain WPA/WPA2 configurations fail to maintain an encrypted wireless channel during a large volume of traffic, potentially allowing remote attackers to obtain sensitive information or bypass authentication via a Wi‑Fi device. The...

CVE-2011-4507

The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi device...

PT-2011-4971

Name of the Vulnerable Software and Affected Versions D-Link DIR-685 router affected versions not specified Description The issue concerns the D-Link DIR-685 router, which fails to maintain an encrypted wireless network when handling a large amount of network traffic under certain WPA and WPA2...

CVE-2011-4507: Undefined Security Weakness

The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi device...

PT-2011-1975

Name of the Vulnerable Software and Affected Versions Nucleus NP Gallery plugin version 0.94 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the DIR NUCLEUS parameter. This is a PHP remote file inclusion vulnerability in the NP Gallery plugin for Nucleus...

D-Link DIR-300 multiple security vulnerabilities

Router management system for D-Link DIR-300 information leakage...

[PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router

---------------------------------------------------------------------- PT-2011-30 Positive Technologies Security Advisory Disclosure of sensitive information in D-Link DIR-300 Router ---------------------------------------------------------------------- ---Vulnerable software Router management...

PT-2011-30: Disclosure of sensitive information in D-Link DIR-300 Router

Positive Research Center has discovered that password hashing is not implemented in D-Link DIR-300 routers, which allows one to obtain passwords in plain text. How to fix Update your software up to the latest version Update link Advisory status 09.09.2011 - Vendor is notified 09.09.2011 - Vendor...