Dnsmasq: Multiple vulnerabilities

Background Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. It includes support for Trivial FTP TFTP. Description Multiple vulnerabilities have been reported in the TFTP functionality included in Dnsmasq: Pablo Jorge and Alberto Solino discovered a heap-based buffer...

SolarWinds TFTP Server Version Detection

This script detects installed version of SolarWinds TFTP Server and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodsolarwindstftpserverdetect.nasl 5369 2017-02-20 14:48:07Z cfi $ SolarWinds TFTP Server Version Detection Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

SolarWinds TFTP Server Version Detection

This script detects installed version of SolarWinds TFTP Server. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server...

dnsmasq TFTP server multiple security vulnerabilities

Heap buffer overrun, NULL pointer dereference...

Design/Logic Flaw

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service service stop via a crafted Option Acknowledgement OACK request. NOTE: some of these details are obtained from third party information...

CVE-2009-3115

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service service stop via a crafted Option Acknowledgement OACK request. NOTE: some of these details are obtained from third party information...

CVE-2009-3115

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service service stop via a crafted Option Acknowledgement OACK request. NOTE: some of these details are obtained from third party information...

CVE-2009-3115

CVE-2009-3115 affects SolarWinds TFTP Server versions up to 9.2.0.111 and earlier. The vulnerability is a denial of service caused by crafting an Option Acknowledgement (OACK) request, potentially stopping the service and impacting availability. Public exploit coverage is noted in some sources, a...

Dnsmasq < 2.50 Heap Overflow & Null pointer Dereference Vulns

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and...

KLA10333 DoS vulnerability in TFTP

An unspecified vulnerability was found in the TFTP Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Exploitation Public exploits exist for this vulnerability...

Dnsmasq < 2.50 Heap Overflow & Null pointer Dereference Vulns

Exploit for unknown platform in category dos / poc ============================================================= Dnsmasq 2.50 Heap Overflow & Null pointer Dereference Vulns ============================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security...

Debian: Security Advisory (DSA-1876-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1876-1 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory DSA 1876-1. OpenVAS Vulnerability Test $Id: deb18761.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1876-1 dnsmasq Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Dnsmasq < 2.50 - Heap Overflow / Null Pointer Dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server...

Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference

Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap...

dnsmasq < 2.50 Multiple Remote TFTP Vulnerabilities

The remote host is running dnsmasq, a DNS and TFTP server. The version of dnsmasq installed on the remote host reports itself as lower than 2.50. Such versions include a TFTP server that is reportedly affected by a number of issues: - A remote heap-overflow vulnerability exists because the softwa...

FreeBSD : dnsmasq -- TFTP server remote code injection vulnerability (80aa98e0-97b4-11de-b946-0030843d3802)

Simon Kelley reports : Fix security problem which allowed any host permitted to do TFTP to possibly compromise dnsmasq by remote buffer overflow when TFTP enabled. Fix a problem which allowed a malicious TFTP client to crash dnsmasq. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2009-2957

Heap-based buffer overflow in the tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read aka RRQ request...

CVE-2009-2958

The tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a TFTP read aka RRQ request with a malformed blksize option...