Motorola Surfboard Cable Modem - Directory Traversal

Motorola Surfboard Cable Modem - Directory Traversal Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls...

Motorola Surfboard cable modem cross-site request forgery vulnerability

Overview Motorola Surfboard cable modems may contain a cross-site request forgery vulnerability that allows an attacker to cause an affected modem to reboot or reload its configuration. Description Cable modems are designed to deliver broadband Internet access via unused bandwidth on a cable...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

CVE-2008-2002

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

CVE-2008-2002

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

CVE-2008-2002

CVE-2008-2002 describes multiple cross-site request forgery (CSRF) vulnerabilities in Motorola Surfboard devices running software SB5100-2.3.3.0-SCM00-NOSH. The issue allows remote attackers to trigger denial of service conditions by crafting requests to configdata.html with specific BUTTON_INPUT...

CVE-2008-2002: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to 1 cause a denial of service device reboot via the "Restart Cable Modem" value in the BUTTONINPUT parameter to configdata.html, and 2 cause a denial of...

Motorolla Surfboard cable modem multiple security vulnerabilities

DoS conditions, crossite request forgery...

Sea-Surfing on the Motorola Surfboard

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

motsurf-csrf.txt

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

CVE-2006-5196

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service device crash via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter...

CVE-2006-5196

The CVE affects the Motorola SURFboard SB4200 Cable Modem HTTP interface. A remote attacker can crash the device by sending a request where MfcISAPICommand is SecretProc and the Secret parameter contains a long string, leading to a denial of service. The NVD score is CVSSv2 7.8 (HIGH) with networ...

CVE-2006-5196: Undefined Security Weakness

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service device crash via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter...

CVE-2002-1944

Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service crash by performing a SYN scan using a tool such as nmap...

CVE-2002-1944

The vulnerability CVE-2002-1944 affects the Motorola Surfboard 4200 cable modem, where remote attackers can trigger a denial-of-service (crash) by sending a SYN scan with a tool like nmap. The available documents describe the affected device and the attack vector (network-based SYN scan) and resu...

CVE-2002-1944: Undefined Security Weakness

Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service crash by performing a SYN scan using a tool such as nmap...

Surfboard HTTPd 1.1.9 - Remote Buffer Overflow (PoC)

Surfboard HTTPd 1.1.9 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/9299/info It has been reported that Surfboard httpd is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The...

Surfboard HTTPd 1.1.9 - Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/9299/info It has been reported that Surfboard httpd is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents itself when an attacker sends a...

surfboard-1.1.8.txt

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: From the website: "Surfboard is a trivial web server, written by Meredydd Luff." ======= 2 Bugs ======= Directory traversal ------------------- The webserver checks the dot-dot pattern only if there is a '?' in...

Surfboard <= 1.1.8 vulns

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: = 1.1.8 Platforms: nix Bugs: possibility to view all the files in the system and resources consumption Risk: medium/high Exploitation: remote/easy Date: 01 Dec 2003 Author: Luigi Auriemma e-mail:...