DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability

Title ----- DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Severity -------- Medium Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability

Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

DEBIAN-CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

Code injection

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

CVE-2008-1072

The CVE-2008-1072 entry concerns the TFTP dissector in Wireshark (Ethereal) versions 0.6.0–0.99.7 running on Ubuntu 7.10. A malformed TFTP packet can cause a denial of service, either crashing the process or causing memory consumption, with a possible link to a Cairo library bug. The connected Ne...

CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

OmniPCX Enterprise音频重新路由信息泄漏及拒绝服务漏洞

BUGTRAQ ID: 26494 CVECAN ID: CVE-2007-5361 OmniPCX Enterprise是企业级的集成通讯解决方案。 OmniPCX Enterprise在处理畸形TFTP请求时存在漏洞，远程攻击者可能利用此漏洞导致设备工作不正常。 在引导时，OmniPCX Enterprise服务器的IP...

CVE-2007-5361

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service lo...

CVE-2007-5361

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service lo...

CVE-2007-5361

The CVE-2007-5361 issue affects Alcatel-Lucent OmniPCX Enterprise (7.1 and earlier). The Communication Server caches a phone IP during a TFTP request from an IP Touch device and then uses that IP as the destination for all subsequent VoIP packets to that phone. This enables remote attackers to ca...

Alcatel OmniPCX Enterprise VoIP Vulnerability

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OmniPCX Enterprise Vendor: Alcatel Subject: VoIP Phone Audio Stream Rerouting Vulnerability Risk High Effect Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: November, 19th 2007 Introduction: ------------...

Alcatel OmniPCX audio stream hijack

It's possible to hijack audio strem from server by sending TFTP request with filename containing victim's IP...

OmniPCX Enterprise音频重路由信息泄露和拒绝服务漏洞

OmniPCX Enterprise是一款功能强大的语音通信系统。 OmniPCX Enterprise处理特定的TFTP请求存在问题，远程攻击者可以利用漏洞重路由音频流而使信息泄露或进行拒绝服务攻击。 在启动过程中，IP Touch电话使用TFTP协议下载配置信息。 通过发送包含电话的MAC地址Ethernet地址TFTP请求伪造这个初始化下载请求，通信服务器会认为攻击者PC的IP地址是为电话集的正常IP地址而重定向音频信息。 由于信号连接没有断开，因此电话仍旧维持原状，可拨号和接收呼叫。攻击者可利用这问题引导音频到攻击者控制端。导致信息泄露或拒绝服务攻击。 Alcatel OmniP...

Symantec Altris deployment solution directory traversal

Directory traversal in PXE with TFTP/MFTP protocols...

Symantec Altiris Deployment Solution目录遍历漏洞

BUGTRAQ ID: 26266 CVECAN ID: CVE-2007-3874 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec的Altiris Deployment Solution产品的可选PXE服务器组件中包含有tftp/mtftp服务程序，该服务程序中存在目录遍历漏洞。 如果用户提交了恶意请求的话，就可能允许未经认证的攻击者以SYSTEM权限下载系统上的任意文件。 Symantec Altiris Deployment Solution 6.x SP2...

CVE-2002-2396

This CVE (CVE-2002-2396) affects Advanced TFTP (atftp) versions 0.5 and 0.6. The vulnerability is a buffer overflow in code that runs when atftp is installed with setuid or setgid, allowing a local user to potentially execute arbitrary code via a long argument to the -g option. Root cause is a bu...