Dnsmasq TFTP服务远程堆溢出漏洞

BUGTRAQ ID: 36121 CVECAN ID: CVE-2009-2957 Dnsmasq是可方便配置的轻型DNS转发器和DHCP服务器。 dnsmasq在启用了TFTP服务（--enable-tftp命令行选项或在/etc/dnsmasq.conf中启用enable-tftp）的时候存在堆溢出漏洞。如果所配置的tftp-root足够长，且远程用户发送的请求中包含有超长的文件名，dnsmasq就可能崩溃或以dnsmasq服务的权限（通常为非特权的nobody用户）执行任意代码。...

Important: Red Hat Security Advisory: dnsmasq security update

An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core...

SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service

!/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5". "\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a"; $tftpudp-send$boom; milw0rm.com 2009-08-31...

CVE-2009-1161

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services CWCS 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other...

CVE-2009-1161

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services CWCS 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other...

CVE-2009-1161

CVE-2009-1161 describes a directory traversal vulnerability in CiscoWorks Common Services (CWCS) 3.0.x–3.2.x on Windows when the TFTP service is enabled. An unauthenticated remote attacker could access arbitrary files via CWCS TFTP, affecting multiple Cisco products that rely on CWCS (e.g., Unifi...

CVE-2009-1161: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services CWCS 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other...

Directory traversal

Directory traversal vulnerability in the PXE TFTP Service PXEMTFTP.exe in LANDesk Management Suite LDMS 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643...

CVE-2008-6195

CVE-2008-6195: A directory traversal in LANDesk Management Suite (LDMS) PXE TFTP Service (PXEMTFTP.exe) allows remote attackers to read arbitrary files via a subdirectory name followed by .. sequences. Affected product is LDMS 8.80.1.1 and earlier. The issue targets the PXE TFTP Service and resul...

CVE-2008-6195: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the PXE TFTP Service PXEMTFTP.exe in LANDesk Management Suite LDMS 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643...

FUJITSU SystemWizard Lite Multiple Vulnerabilities

FUJITSU SystemWizard Lite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0271: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...

LANDesk管理套件TFTP服务目录遍历漏洞

BUGTRAQ ID: 28535 Landesk管理套件是一款网络管理系统，可控制桌面，服务器和移动设备等。 LANDesk管理套件的PXE TFTP服务（PXEMTFTP.exe）存在目录遍历漏洞，如果远程攻击者向该服务提交了恶意请求的话，就可以从受影响系统下载任意文件。 LANDesk Software Landesk Management Suite 8.8 LANDesk Software Landesk Management Suite 8.7 SP5 LANDesk Software ----------------...

Directory traversal

Directory traversal vulnerability in the PXE TFTP Service PXEMTFTP.exe in LANDesk Management Suite LDMS 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2008-1620

Directory traversal vulnerability in 2X TFTP service TFTPd.exe 3.2.0.0 and earlier in 2X ThinClientServer 5.0sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... dot dot dot in the filename...

Directory traversal

Directory traversal vulnerability in 2X TFTP service TFTPd.exe 3.2.0.0 and earlier in 2X ThinClientServer 5.0sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... dot dot dot in the filename...

CVE-2008-1643

Directory traversal vulnerability in the PXE TFTP Service PXEMTFTP.exe in LANDesk Management Suite LDMS 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2008-1643

CVE-2008-1643 describes a directory traversal vulnerability in LANDesk Management Suite (LDMS)’s PXE TFTP Service (PXEMTFTP.exe). Affected versions are LDMS 8.7 SP5 and earlier and 8.8. The flaw allows remote attackers to read arbitrary files via unspecified vectors in the PXE TFTP service. The a...

CVE-2008-1620

CVE-2008-1620 affects the 2X TFTP service (TFTPd.exe) up to version 3.2.0.0 and 2X ThinClientServer up to 5.0_sp1-r3497. This is a directory traversal vulnerability that lets remote attackers read or overwrite arbitrary files by using a file name with a dot-dot (“..”) path. The NVD entry indicate...

CVE-2008-1620

Directory traversal vulnerability in 2X TFTP service TFTPd.exe 3.2.0.0 and earlier in 2X ThinClientServer 5.0sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... dot dot dot in the filename...