83 matches found
CVE-2011-4716: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter...
PT-2011-5051
Name of the Vulnerable Software and Affected Versions DreamBox DM800 versions 1.6rc3, 1.5rc1, and earlier Description A directory traversal issue exists in the file component, allowing remote attackers to read arbitrary files by manipulating the file parameter. Recommendations For DreamBox DM800...
DreamBox DM800 - 'file' Local File Disclosure
source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on...
DreamBox DM800 - file Local File Disclosure
DreamBox DM800 - file Local File Disclosure source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentiall...
DreamBox DM800 1.5rc1 - File Disclosure
DreamBox DM800 1.5rc1 - File Disclosure !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh...
DreamBox DM800 1.5rc1 - File Disclosure
!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...
DreamBox DM800 1.5rc1 Remote File Disclosure
!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...
DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit
Exploit for hardware platform in category remote exploits !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh...
DreamBox DM800 - Arbitrary File Download
DreamBox DM800 - Arbitrary File Download Exploit Title: title Date: date Author: ShellVision Version: dm800 = 1.6rc3 Tested on: dm800 Release 4.6.0 2009-12-24 DreamBox DM800 Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de...
DreamBox DM800 - Arbitrary File Download
Exploit Title: title Date: date Author: ShellVision Version: dm800 = 1.6rc3 Tested on: dm800 Release 4.6.0 2009-12-24 DreamBox DM800 Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Affected version: DM800 may affect others...
DreamBox DM800 Arbitrary File Download Vulnerability
Exploit for hardware platform in category remote exploits Exploit Title: title Date: date Author: ShellVision Version: dm800 / !CDATA / functiontryvar...
DreamBox DM500(+) Arbitrary File Download Vulnerability
Summary The Dreambox is a series of Linux-powered DVB satellite, terrestrial and cable digital television receivers set-top box. Description Dreambox suffers from a file download vulnerability thru directory traversal with appending the '/' character in the HTTP GET method of the affected host...
DreamBox DM500(+) - Arbitrary File Download
DreamBox DM500+ - Arbitrary File Download DreamBox DM500+ Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Affected version: DM500, DM500+, DM500HD and DM500S Summary: The Dreambox is a series of Linux-powered DVB satellite,...
DreamBox DM500+ File Download
DreamBox DM500+ Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Affected version: DM500, DM500+, DM500HD and DM500S Summary: The Dreambox is a series of Linux-powered DVB satellite, terrestrial and cable digital television...
Dreambox DM500超长请求拒绝服务漏洞
CNCAN ID：CNCAN-2008090302 Dreambox DM500是一款卫星电视接收设备。 Dreambox DM500 WEB接口处理超长请求存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 发送超长的HTTP请求给WEB服务程序处理，可导致程序停止响应，造成拒绝服务攻击。 Dreambox DM500 目前没有解决方案提供： http://www.dream-multimedia-tv.de/english/productsdm500.php...
Design/Logic Flaw
The web interface in Dreambox DM500C allows remote attackers to cause a denial of service application hang via a long URI...
CVE-2008-3936
The web interface in Dreambox DM500C allows remote attackers to cause a denial of service application hang via a long URI...
CVE-2008-3936
The web interface in Dreambox DM500C allows remote attackers to cause a denial of service application hang via a long URI...
CVE-2008-3936
The CVE-2008-3936 issue affects the Dreambox DM500C web interface. The provided sources state that remote attackers can trigger a denial of service (application hang) by sending a long URI. No concrete root-cause, affected versions, or fixes are detailed in the supplied documents. Exploitation st...