CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

Design/Logic Flaw

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

CVE-2013-7030

CVE-2013-7030 affects Cisco Unified Communications Manager: the TFTP service can leak sensitive phone configuration data via an RRQ, specifically exposing a cleartext UseUserCredential in SPDefault.cnf.xml. The issue stems from a default TFTP behavior described as exposing this field, with Cisco ...

Cisco Unified Communications Manager - TFTP Service

Cisco Unified Communications Manager - TFTP Service !/bin/bash Proof of Concept on how to get tftp config files from cisco phones This can be performed anonymously and privileges gathered relies on those assigned to the ldap account Developed by Daniel Svartman [email protected] In case tf...

Cisco Unified Communications Manager - TFTP Service

!/bin/bash Proof of Concept on how to get tftp config files from cisco phones This can be performed anonymously and privileges gathered relies on those assigned to the ldap account Developed by Daniel Svartman [email protected] In case tftp files are encrypted, you will need to hijack a...

Cisco Unified Communications Manager - TFTP Service

Exploit for hardware platform in category local exploits !/bin/bash Proof of Concept on how to get tftp config files from cisco phones This can be performed anonymously and privileges gathered relies on those assigned to the ldap account Developed by Daniel Svartman email protected In case tftp...

Microsoft Windows RIS TFTP Service Writable Path (MS06-077; CVE-2006-5584)

The Remote Installation Service, RIS, is a Microsoft-supplied server that provides tools that facilitates the remote installation of Microsoft Windows. RIS requires that remote clients have a Preboot eXecution Environment PXE BIOS enabled to remotely execute boot environment variables. On Microso...

Preemptive Protection against Dnsmasq TFTP Service Remote Heap Buffer Overflow

A buffer overflow vulnerability has been reported in Dnsmasq, a lightweight DNS forwarder and DHCP server, designed to provide DNS services to a small-scale network. The vulnerability is due to improper bounds checking when handling TFTP Read requests. A remote attacker can exploit this...

CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server...

Dnsmasq < 2.50 Heap Overflow & Null pointer Dereference Vulns

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and...

Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference

Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap...

Dnsmasq TFTP服务远程堆溢出漏洞

BUGTRAQ ID: 36121 CVECAN ID: CVE-2009-2957 Dnsmasq是可方便配置的轻型DNS转发器和DHCP服务器。 dnsmasq在启用了TFTP服务（--enable-tftp命令行选项或在/etc/dnsmasq.conf中启用enable-tftp）的时候存在堆溢出漏洞。如果所配置的tftp-root足够长，且远程用户发送的请求中包含有超长的文件名，dnsmasq就可能崩溃或以dnsmasq服务的权限（通常为非特权的nobody用户）执行任意代码。...

Dnsmasq TFTP Service 2.40 - 2.49 Multiple Vulnerabilities

Dnsmasq is prone to a remotely exploitable heap-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Important: Red Hat Security Advisory: dnsmasq security update

An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core...

SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service

!/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5". "\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a"; $tftpudp-send$boom; milw0rm.com 2009-08-31...

CVE-2009-1161

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services CWCS 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other...

CVE-2009-1161

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services CWCS 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other...

CVE-2009-1161

CVE-2009-1161 describes a directory traversal vulnerability in CiscoWorks Common Services (CWCS) 3.0.x–3.2.x on Windows when the TFTP service is enabled. An unauthenticated remote attacker could access arbitrary files via CWCS TFTP, affecting multiple Cisco products that rely on CWCS (e.g., Unifi...