2242 matches found
CVE-2002-2396
Buffer overflow in Advanced TFTP atftp 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option...
Adobe pdf reader URI use analysis-vulnerability warning-the black bar safety net
poc someone has already published. Use in a manner substantially homogenous tftp,tftp use up the limited system,the firewall of the factors. So simple to talk about another use-bundled exe is generated and executed. First, this vulnerability can execute arbitrary commands. I haven't tried directl...
CVE-2002-2237
tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux...
CVE-2002-2237
CVE-2002-2237 affects TFTPD32 TFTP server 2.21 and earlier, allowing remote denial of service via a GET request containing a DOS device name (e.g., com1/aux). The CERT advisory associates this with Wyse TFTPD32 in Wyse Simple Imager (WSI) and lists a fixed version path: 2.51 for this CVE, with WS...
Using a reverse connection break the tcp/ip limit of the process-vulnerability warning-the black bar safety net
Everyone is engaged in unicode when there's no found sometimes tftp fails, that is the other host is forced to close a remote connection, this situation generally is the other administrator for the tcp/ip or the firewall's sake, yesterday I after testing, found a way to break this limitation of t...
HP-UX Security Patch : PHNE_36217
bootpd1M/DHCP, tftp1 and tftpd1M patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26564; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHNE_32825
bootpd1M/DHCP, tftp1 and tftpd1M patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26533; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability
Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...
Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability
Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...
VMware vielib.dll StartProcess command execution
Added: 09/25/2007 CVE: CVE-2007-4058 BID: 25118 OSVDB: 42078 Background VMware is a suite of products supporting the creation and operation of virtual machines , which are self-contained, independent guest operating systems running within a host operating system. Problem The StartProcess function...
VMware vielib.dll StartProcess command execution
Added: 09/25/2007 CVE: CVE-2007-4058 BID: 25118 OSVDB: 42078 Background VMware is a suite of products supporting the creation and operation of virtual machines, which are self-contained, independent guest operating systems running within a host operating system. Problem The StartProcess function ...
Allied Telesyn TFTP Server 1.9 Long Filename Overflow
This module exploits a stack buffer overflow in AT-TFTP v1.9, by sending a request get/write for an overly long file name. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Allied Telesyn TFTP...
Directory traversal
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...
CVE-2007-4226
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...
CVE-2007-4226
CVE-2007-4226 describes a directory traversal in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8). The vulnerability allows remote authenticated administrators with certain TFTP privileges to create and overwrite arbitrary files through a .. in a pathname, w...
BlueCat Networks Proteus TFTP文件远程权限提升漏洞
BUGTRAQ ID: 25214 Proteus是企业级的IP地址管理设备。 Proteus的TFTP服务器实现上存在漏洞，远程攻击者可能利用此漏洞获取服务器的root用户权限。 可以使用Proteus向所管理的Adonis设备上传文件，管理员可以命名TFTP文件，但没有对用户输入（如相对路径）执行数据验证。所上传的文件仅可拷贝到/tftpboot/目录，且文件拷贝是以root用户权限执行的，因此名为../etc/shadow的文件可以覆盖影子口令数据库/etc/shadow。 Bluecat Networks Proteus 2.0.2.0 Bluecat Networks Adon...
TS-2007-002-0.txt
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis root Privilege Access Date: 2007-08-06 Advisory ID: TS-2007-002-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact Exploit...
Adonis TFTP directory traversal
User with privileges to manage TFTP configuration can upload system files...
TS-2007-002-0: BlueCat Networks Adonis root Privilege Access
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis root Privilege Access Date: 2007-08-06 Advisory ID: TS-2007-002-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact Exploit...
BlueCat Networks Adonis 5.0.2.8 - TFTP Privilege Escalation
source: https://www.securityfocus.com/bid/25214/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability. This issue occurs when Proteus appliances are used to upload files to an affected Adonis appliance for TFTP download. An attacker with administrative...