CVE-2005-1827

The CVE-2005-1827 issue affects the D-Link DSL-504T, where an unauthenticated remote attacker can bypass authentication by sending a direct request to the firmwarecfg endpoint. This allows privilege escalation to perform actions such as upgrading firmware, restarting the router, or restoring a sa...

PT-2005-2794 · D Link · D-Link Dsl-504T

Name of the Vulnerable Software and Affected Versions: D-Link DSL-504T affected versions not specified Description: The issue allows remote attackers to bypass authentication and gain privileges. This can be achieved by making a direct request to the "firmwarecfg" endpoint. As a result, attackers...

[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-3 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2004 http://www.debian.org/security/faq -...

CVE-2003-1361

Unknown vulnerability in VERITAS Bare Metal Restore BMR of Tivoli Storage Manager TSM 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server...

CVE-2003-0584

Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...

CVE-2003-0583

Buffer overflow in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument...

[Full-Disclosure] SRT2003-07-16-0358 - bru has buffer overflow and format issues

Secure Network Operations, Inc. http://www.secnetops.com Anvil IDS appliance http://www.secnetops.com/products Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations...

VERITAS Software Technical Advisory

Dear Valued VERITAS Software Customer, VERITAS Technical Services has recently discovered an issue that could potentially allow unauthorized access to the main server when utilizing VERITAS Bare Metal Restore for Tivoli Storage Manager TSM versions 3.1.0, 3.1.1, 3.2.0 and 3.2.1. This TechAlert is...

iCal 3.7 - HTTP Request Denial of Service

iCal 3.7 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6505/info A denial of service vulnerability has been reported for iCal. The vulnerability occurs when iCal receives a specially formatted HTTP request. This will cause iCal to crash thereby leading to a denial of...

CVE-2002-2324

The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list ACL permissions, which allows local users to access restricted files and modify registry settings...

Linksys WAP11 1.31.4 D-Link DI-804 4.68Dl-704 2.56 b5 - Embedded HTTP Server Denial of Service

Linksys WAP11 1.31.4 D-Link DI-804 4.68Dl-704 2.56 b5 - Embedded HTTP Server Denial of Service source: https://www.securityfocus.com/bid/6090/info A denial of service vulnerability has been reported for several networking devices. The condition will be triggered when the embedded web server, used...

WinXP Pro(Gold) Insecure System Restore File Permissions

WinXP ProGold Insecure System Restore File Permissions On the Windows XP ProfessionalGold, the "System Restore" files are not protected properly by NTFS ACL, so every local user can access these important files. System Restore files are stored in the "System Volume Information" directory, and thi...

Microsoft Windows XP weak permissions

Weak permissions for restore information allow to view and change sensitive data, including SAM...

CVE-2002-0210

setlicense for TOLIS Group Backup and Restore Utility BRU 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file...

CVE-2002-0210

setlicense for TOLIS Group Backup and Restore Utility BRU 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file...

CVE-2002-0210

CVE-2002-0210 affects the TOLIS Group Backup and Restore Utility (BRU) version 17.0. The vulnerability arises from a symlink attack on the temporary file /tmp/brutest.$$, allowing local users to overwrite arbitrary files. According to the NVD entry, the impact is complete for confidentiality, int...

CVE-1999-1122

CVE-1999-1122 affects SunOS 4.0.3 and earlier, via a vulnerability in the restore component that enables local privilege escalation for local users. The connected PT-1989-1000 entry confirms the affected SunOS versions and notes that, at present, there is no information about a fix in newer versi...

bru backup program

Product: Bru Description: ------------ BRU provides fully verified backup and restore operations and offers options for most conceivable data backup and recovery needs. BRU is fully device independent, so it works with any device or filesystem that is supported by your operating system...

CVE-2001-0048

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...

CVE-2001-0048

CVE-2001-0048 affects Microsoft Windows 2000 domain controllers; the Configure Your Server tool installs a blank Directory Service Restore Mode password. This allows attackers with physical access to the controller to install malicious software. Root cause is a blank DS Restore Mode password crea...