CVE-2008-1311

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service daemon hang by uploading a file named 1 '|' pipe, 2 '"' quotation mark, or 3 "" less than, greater than; or 4 a file with a long name. NOTE: the issue for vector 4 might...

CVE-2008-1310

PacketTrap Networks pt360 Tool Suite includes a TFTP server component affected by a directory traversal vulnerability. The CVE-2008-1310 entry applies to pt360 Tool Suite 1.1.33.1.0 and other versions before 2.0.3900.0, where an attacker can read and overwrite arbitrary files via directory traver...

CVE-2008-1310

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname...

CVE-2008-1312

Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service daemon crash via a long TFTP packet, a different vulnerability than CVE-2008-1311...

CVE-2008-1311

CVE-2008-1311 affects PacketTrap pt360 Tool Suite POS/PRO TFTP server. The vulnerability in the TFTP service allows remote denial of service (daemon hang) by uploading specially named files: a pipe (|), a quote (") or angle-bracket (,) or by using an excessively long filename. Related details sho...

Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076

Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Argon Client Management Services <= 1.31 Directory Traversal Vuln

No description provided by source. Luigi Auriemma Application: Argon Client Management Services http://www.argontechnology.com/product.aspx/cid1/43 Versions: = 1.31 TFTP Boot Server = 2.5.3.1 Platforms: Windows Bug: directory traversal in TFTP Boot Server Exploitation: remote Date: 08 Mar 2008...

Acronis Snap Deploy PXE Server TFTP目录遍历和拒绝服务漏洞

BUGTRAQ ID: 28182 CNCAN ID:CNCAN-2008031101 Acronis PXE Server是一款Acronis Snap Deploy服务器的组建，用于配置管理。 Acronis PXE Server不正确处理用户提交的请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务或目录遍历攻击。 PXE Server pxesrv.exe实现的TFTP服务器目录"../"字符缺少过滤，可导致目录遍历问题，以应用程序权限查看系统文件内容。 不完全的TFTP请求可导致NULL指针访问而使系统崩溃。 Acronis Snap Deploy 2.0.0.1076...

Acronis PXE Server multiple security vulnerabilities

TFTP server directory traversal and NULL pointer dereference...

Denial of Service in PacketTrap TFTP server 2.0.3901.0

Luigi Auriemma Application: pt360 Tool Suite PRO http://www.packettrap.com/product/index.aspx Versions: = 2.0.3901.0 Platforms: Windows Bug: Denial of Service of the TFTP server Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...

PacketTrap PT360 TFTP directory traversal and DoS

TFTP server directory traversal...

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author...

Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns

Exploit for unknown platform in category remote exploits ====================================================================== Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns ====================================================================== Luigi Auriemma Application:...

Argon Client Management Services <= 1.31 Directory Traversal Vuln

Exploit for unknown platform in category remote exploits ================================================================= Argon Client Management Services From vendor's website: "Client Management Services® CMS includes all the server-based services PXE Server, BOOTP Server and administration...

argon client management services 1.31 - Directory Traversal

argon client management services 1.31 - Directory Traversal Luigi Auriemma Application: Argon Client Management Services http://www.argontechnology.com/product.aspx/cid1/43 Versions: From vendor's website: "Client Management Services® CMS includes all the server-based services PXE Server, BOOTP...

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

argon client management services 1.31 - Directory Traversal

Luigi Auriemma Application: Argon Client Management Services http://www.argontechnology.com/product.aspx/cid1/43 Versions: From vendor's website: "Client Management Services® CMS includes all the server-based services PXE Server, BOOTP Server and administration tools needed to setup an open...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 5058)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

openSUSE 10 Security Update : wireshark (wireshark-5057)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

openSUSE 10 Security Update : ethereal (ethereal-5056)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...