3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit

No description provided by source. 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb victimhost victimport Defau...

Telnet-FTP Server目录遍历及远程拒绝服务漏洞

Telnet-Ftp Server是一款Windows平台上的多用户Telnet/Ftp服务器。 Telnet-Ftp Server的GET和PUT等命令的处理过程中存在输入验证错误，允许攻击者通过目录遍历攻击列出并下载FTP根目录外的任意文件。 此外，攻击者还可以通过发送两个连续的RETR命令导致服务崩溃。 Sorin Chitu Telnet-FTP Server 1.0 build 1.250 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://slimbyte.sufx.net/...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode Remote Overflow

3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Remote Overflow 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby...

Debian DSA-1059-1 : quagga - several vulnerabilities

Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...

Debian DSA-977-1 : heimdal - several vulnerabilities

Two vulnerabilities have been discovered in heimdal, a free implementation of Kerberos 5. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-0582 Privilege escalation in the rsh server allows an authenticated attacker to overwrite arbitrary file...

Debian DSA-1049-1 : ethereal - several vulnerabilities

Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...

FiWin SS28S Wi-Fi phones backdoor account

Phone has debug console with telnet access and hardcoded account 1 with password 1...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CVE-2006-4832

Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx R1 and earlier, SDM-93xx 10.x.x R2 and earlier, and SDM-92xx 9.x.x R1 and earlier allows remote attackers to cause a denial of service reboot and possibly execute arbitrary code via a long username...

CVE-2006-4832

Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx R1 and earlier, SDM-93xx 10.x.x R2 and earlier, and SDM-92xx 9.x.x R1 and earlier allows remote attackers to cause a denial of service reboot and possibly execute arbitrary code via a long username...

netperformer.txt

NetPerformer Frame Relay Access Device FRAD ACT Multiple Vulnerabilities .. Release Date : 8 July 2006 Product Affected : - NetPerformer FRAD ACT SDM-95xx version 7.xx R1, earlier, and possibly newer - NetPerformer FRAD ACT SDM-93xx version 10.x.x R2, earlier, and possibly newer - NetPerformer FR...

Multiple NetPerformer FRAD ACT security vulnerabilities

Buffer overflow on oversized telnet username, LAND attack vulnerability...

Verso NetPerformer Frame Relay Access Device - Telnet Buffer Overflow

Verso NetPerformer Frame Relay Access Device - Telnet Buffer Overflow source: https://www.securityfocus.com/bid/19989/info Verso NetPerformer Frame Relay Access Device FRAD is prone to a remotely exploitable buffer overflow in the telnet service. A remote attacker can exploit this issue to execut...

Verso NetPerformer Frame Relay Access Device - Telnet Buffer Overflow

source: https://www.securityfocus.com/bid/19989/info Verso NetPerformer Frame Relay Access Device FRAD is prone to a remotely exploitable buffer overflow in the telnet service. A remote attacker can exploit this issue to execute arbitrary code on the affected device. Failed exploit attempts will...

mercur-login.pl.txt

!/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security http://www.securityfocus.com/bid/17138 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 2 print...

[Full-disclosure] NetPerformer FRAD ACT Multiple Vulnerabilities

NetPerformer Frame Relay Access Device FRAD ACT Multiple Vulnerabilities .= Arif Jatmoko =. Release Date : 8 July 2006 Product Affected : - NetPerformer FRAD ACT SDM-95xx version 7.xx R1, earlier, and possibly newer - NetPerformer FRAD ACT SDM-93xx version 10.x.x R2, earlier, and possibly newer -...

Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (2)

!/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security https://www.securityfocus.com/bid/17138 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 2 print...

VulnCheck KEV: CVE-2004-1464

Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell RSH, Secure Shell SSH, and in some cases, Hypertext Transport Protocol HTTP access to the Cisco device...

Dish dish intrusion issues face-to-face-the vulnerability warning-the black bar safety net

Dish dish intrusion issues face-to-face I was too lazy to go to school when you've never done the job to only one of the advantages of the love want to the problem in order to IT168, the development had to move to even have stainless candle of stupid hands. From that about itI found a lot of peop...

sipXtapi.txt

!/usr/bin/perl Remote Buffer Overflow in sipXtapi bad char 0x00 0x09 0x0a 0x0d 0x20 use IO::Socket; use strict; print "\n\n"; print "sipXtapi original Exploit by Michael Thumann added a real shellcode by acaro\n\n"; print "tested on sipXphone 2.6.0.27 read the code for ret address\n\n"; if not...