8 matches found
CVE-2012-1223
RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...
Directory traversal
Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the File command...
Code injection
RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...
CVE-2012-1221: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the File command...
CVE-2012-1222: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...
CVE-2012-1223: Exposure of Sensitive Information to an Unauthorized Actor
RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...
CVE-2012-1221
CVE-2012-1221 describes a directory traversal in the telnet server of RabidHamster R2/Extreme, affecting 1.65 and earlier. Remote attackers can read arbitrary files via .. in the File command. The provided sources confirm the vulnerability details but do not specify patches or remediation steps.