CiscoKits 1.0 - TFTP Server Directory Traversal

!/usr/bin/python Title : CiscoKits TFTP Server Directory Traversal Vulnerability Author : Antu Sanadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory : http://secpod.org/blog/?p=301...

Ciscokits TFTP Server 1.0 Long Filename DoS Vulnerability - Active Check

Ciscokits TFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ciscokits 1.0 TFTP Server File Name DoS

Exploit for windows platform in category dos / poc !/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 -...

Ciscokits 1.0 - TFTP Server File Name Denial of Service

Ciscokits 1.0 - TFTP Server File Name Denial of Service !/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 ...

Ciscokits 1.0 - TFTP Server File Name Denial of Service

!/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 - Vendor approved release of PoC on July 23, 2010. Notes...

Ciscokits 1.0 TFTP Denial Of Service

!/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 - Vendor approved release of PoC on July 23, 2010. Notes...

Avaya IP Office Manager TFTP Server 8.1 Directory Traversal Vulnerability - Active Check

Avaya IP Office Manager TFTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for curl FEDORA-2011-8586

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2011-8586 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Avaya IP Office Manager TFTP Server 8.1 - Directory Traversal

!/usr/bin/python Title : Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.avaya.com/usa/product/ip-office Advisory : http://www.avaya.com/usa/product/ip-office...

Avaya IP Office Manager TFTP Server 8.1 - Directory Traversal

Avaya IP Office Manager TFTP Server 8.1 - Directory Traversal !/usr/bin/python Title : Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.avaya.com/usa/product/ip-office Advisory :...

Avaya IP Office Manager TFTP Server 8.1 Directory Traversal

Title : Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.avaya.com/usa/product/ip-office Advisory : http://www.avaya.com/usa/product/ip-office...

SuSE 10 Security Update : tftp (ZYPP Patch Number 7589)

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option. CVE-2011-2199 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

HP Intelligent Management Center TFTP Multiple Vulnerabilities

A TFTP server belonging to HP Intelligent Management Center is running on the remote host. This is a collection point for any HP Intelligent Management Center clients on the network. The installed version of this server contains a number of vulnerabilities, including code execution and arbitrary...

Cisco CNS Network Registrar默认验证信息验证绕过漏洞

Bugtraq ID: 48076 CVE ID：CVE-2011-2024 Cisco CNS Network Registrar提供高可扩展性和可靠性的DNS, DHCP和TFTP服务。 Cisco Network Registrar包含一个使用默认密码的管理员账户，攻击者可以利用此漏洞以管理员特权更改Cisco Network Registrar的设置 Cisco CNS Network Registrar 7.1 Cisco CNS Network Registrar 7.0 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

CVE-2011-1852

HP IMC 5.0 before E0101L02 is affected by CVE-2011-1852 due to multiple stack-based buffer overflows in tftpserver.exe when handling DATA or ERROR TFTP packets, allowing remote arbitrary-code execution. The vulnerability is documented across HP’s security bulletin and multiple advisories; HP list...

HP iMC 5.0 TFTP WRQ "Remote Code Execution" Vulnerability

HP Intelligent Management Center contains a flaw related to thetftpserver.exe component allowing the creation or upload of arbitrary files when handling Write Request packets. This may allow a remote attacker to upload arbitrary files which will allow for the execution of arbitrary code as the...

ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability

ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-163 May 10, 2011 -- CVE ID: CVE-2011-1851 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

AT-TFTP Server Remote Denial of Service Vulnerability

AT-TFTP Server v1.8 Remote Denial of Service Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1013 01/04/2011 Issue Discovered 04/04/2011 Vendor Notified No Response from the Vendor 25/04/2011 Advisory Released Class: Denial of Service Severity: High Overview:...

AT-TFTP DoS

Crash if no acknowledgment is recevied after file is retrieved...

AT-TFTP Server 1.8 - Read Request Remote Denial of Service

AT-TFTP Server 1.8 - Read Request Remote Denial of Service source: https://www.securityfocus.com/bid/47561/info AT-TFTP is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate...