2242 matches found
CVE-2011-4722
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
CVE-2011-4722
CVE-2011-4722 is a directory traversal vulnerability in Ipswitch WhatsUp Gold’s TFTP Server 1.0.0.24 that allows remote attackers to read arbitrary files via a .. sequence in the Filename field of an RRQ request. Public materials describe exploitation via a Metasploit module targeting WhatsUp Gol...
CVE-2011-4722
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
Hardcoded credentials
Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service daemon crash via a long filename in a 1 RRQ or 2 WRQ operation...
CVE-2011-4720
Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service daemon crash via a long filename in a 1 RRQ or 2 WRQ operation...
CVE-2011-4720
Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service daemon crash via a long filename in a 1 RRQ or 2 WRQ operation...
CVE-2011-4720
Hillstone HS TFTP Server 1.3.2 is affected by a denial-of-service vulnerability triggered by long filenames in TFTP RRQ/WRQ operations. The issue is network-exposed and leads to daemon crash, with CVE-2011-4720 repeatedly cited across CVE/NVD/CNVD/OpenVAS entries. No remediation or patch details ...
OracleVM 2.1 : dnsmasq (OVMSA-2009-0022)
The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-2957 Heap-based buffer overflow in the tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long...
[SECURITY] Fedora 20 Update: curl-7.32.0-15.fc20
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
UBUNTU-CVE-2014-3676
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...
CVE-2014-3676
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...
PXE Exploit Server
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/proto/tftp' require 'rex/proto/dhcp' class Metasploit3 'PXE Exploit Server', 'Description' = %q This module provides a PXE server, running ...
CVE-2014-0328
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response...
Information disclosure
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response...
CVE-2014-0328
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response...
CVE-2014-0328
The CVE-2014-0328 entry describes Cobham’s thraneLINK protocol on Cobham devices as failing to verify firmware signatures, enabling a remote attacker with physical or terminal access to trigger SNMP and TFTP interactions to install a malicious firmware image. The NVD entry reiterates that lack of...
Cobham thraneLINK improper verification of firmware updates vulnerability
Overview Cobham's thraneLINK protocol does not verify cryptographic signatures for firmware updates before installing them. This may allow an attacker to deploy a malicious firmware update to the device. Description CWE-347: Improper Verification of Cryptographic Signature IOActive reports that...
TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) - Command Execution
Exploit for hardware platform in category web applications Vulnerability description: The domain name parameters of the "Parental Control" and "Access Control" features of the TP-Link TL-WR740N v4 FW-Ver. 3.16.6 Build 130529 Rel.47286n router are prone to arbitrary shell command execution as root...
Foreman Smart-Proxy TFTP Remote Command Injection
The remote web server is running a version of Foreman Smart-Proxy TFTP that is affected by a remote command injection vulnerability. An attacker can send a specially crafted URL that results in the execution of arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...