CVE-2008-1410

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

CVE-2008-1411

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

CVE-2008-1403

CVE-2008-1403 involves a stack-based buffer overflow in the TFTP server component of BootManage TFTPD 1.99 and earlier and BootManage Administrator 7.1 and earlier. The vulnerability permits a remote attacker to execute arbitrary code by sending a request containing a long filename. The provided ...

CVE-2008-1403

Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remote attackers to execute arbitrary code via a request with a long filename...

CVE-2008-1411

The CVE-2008-1411 entry affects the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier. The issue is a denial of service (crash) caused by an incomplete TFTP request that triggers a NULL pointer dereference in the PXE server. This is the explicit vulnerability described in the ...

CVE-2008-1410

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

CVE-2008-1410

CVE-2008-1410 affects Acronis Snap Deploy 2.0.0.1076 and earlier, where the PXE Server (pxesrv.exe) is vulnerable to directory traversal via the TFTP service. This allows remote attackers to read arbitrary files from the affected system. The vulnerability is documented with a CVSSv2 base score of...

BootManage TFTP服务器filename参数栈溢出漏洞

BUGTRAQ ID: 28270 BootManage TFTPD是联网PC管理工具BootManage Administrator中所实现的TFTP服务器。 BootManage TFTPD服务器实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向BootManage TFTPD发送了超过32字节的文件名的话，则在使用这个文件名创建日志字符串sprintfbuffer, "%s: %s", filename, logentry的时候就可能触发栈溢出，导致执行任意指令。 bootix Technology BootManage TFTPD = 1.99 bootix...

BootManage TFTP Server 1.99 - Filename Remote Buffer Overflow

BootManage TFTP Server 1.99 - Filename Remote Buffer Overflow source: https://www.securityfocus.com/bid/28270/info BootManage TFTP Server is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffe...

BootManage TFTP Server 1.99 - 'Filename' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/28270/info BootManage TFTP Server is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffer. An attacker can exploit this issue to execute arbitrary cod...

Directory traversal in Argon Client Management Services 1.31

Luigi Auriemma Application: Argon Client Management Services http://www.argontechnology.com/product.aspx/cid1/43 Versions: = 1.31 TFTP Boot Server = 2.5.3.1 Platforms: Windows Bug: directory traversal in TFTP Boot Server Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail:...

PacketTrap pt360 TFTP Server < 1.0.3302.0 Multiple Vulnerabilities

PacketTrap pt360 Tool Suite is installed on the remote system. It is a single reporting solution that integrates various free network management tools provided by PacketTrap Networks. The tool suite includes a TFTP server component that is susceptible to a directory traversal and a denial of...

Argon Client Management Services directory traversal

directory traversal in built-in TFTP server...

CVE-2008-1310

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname...

Directory traversal

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname...

Code injection

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service daemon hang by uploading a file named 1 '|' pipe, 2 '"' quotation mark, or 3 "" less than, greater than; or 4 a file with a long name. NOTE: the issue for vector 4 might...

Code injection

Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service daemon crash via a long TFTP packet, a different vulnerability than CVE-2008-1311...

CVE-2008-1311

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service daemon hang by uploading a file named 1 '|' pipe, 2 '"' quotation mark, or 3 "" less than, greater than; or 4 a file with a long name. NOTE: the issue for vector 4 might...

CVE-2008-1312

Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service daemon crash via a long TFTP packet, a different vulnerability than CVE-2008-1311...

CVE-2008-1312

The vulnerability CVE-2008-1312 affects PacketTrap pt360 Tool Suite’s TFTP server prior to version 2.0.3900.0 (and 1.1.33.1.0). Remote attackers can trigger a denial-of-service (daemon crash) by sending a long TFTP packet. Public details describe affected versions; remediation in the public docs ...