2242 matches found
[SA19844] WinAgents TFTP Server Directory Traversal Vulnerability
TITLE: WinAgents TFTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19844 VERIFY ADVISORY: http://secunia.com/advisories/19844/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: WinAgents TFTP Server 3.x...
CVE-2006-1952
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...
Directory traversal
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...
Directory traversal
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
CVE-2006-1952
The CVE-2006-1952 entry describes a directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier. The issue allows remote attackers to read arbitrary files by using triple dot sequences ("...") in a GET request. Root cause is improper handling of path traversal, enabling...
CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
CVE-2006-1952
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...
CVE-2006-1951
The CVE-2006-1951 entry targets SolarWinds TFTP Server versions 8.1 and earlier. A directory traversal flaw allows remote attackers to download arbitrary files by issuing crafted GET requests containing sequences like ....//, which are collapsed into ../ by filtering. This bypass enables access o...
SolarWinds free Windows TFTP server directory traversal
Directory traversal with requests like get NUL/....//....//WINNT/win.ini...
Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows
Rapid7, LLC Security Advisory Rapid7 Advisory R7-0019 Directory traversal vulnerability in SolarWinds TFTP Server for Windows Date: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0019.html CVE: CVE-2006-1951 1. Affected systems: KNOWN VULNERABLE: o SolarWinds TFTP Server v8.1 an...
cURL command line download utility buffer overflow
Buffer overflow on parsing tftp:// URL...
TFTP File Detection (HP Ignite-UX) - Active Check
The remote host has a TFTP server installed that is serving one or more sensitive HP Ignite-UX files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
TFTP Weak Directory Permissions (HP Ignite-UX) - Active Check
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
TFTP File Detection (Cisco CallManager) - Active Check
The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Update Protection against Tftpd32 Request Error Message Format String Vulnerability
Tftpd32 is a freeware TFTP server designed for Microsoft Windows operating systems. A vulnerability has been identified in Tftpd32, specifically in the processing of Get requests containing a malformed filename. An attacker capable of sending a specially crafted filename can cause a vulnerable...
TFTP File Detection (HP Ignite-UX passwd) - Active Check
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
GLSA-200603-19 : cURL/libcurl: Buffer overflow in the handling of TFTP URLs
The remote host is affected by the vulnerability described in GLSA-200603-19 cURL/libcurl: Buffer overflow in the handling of TFTP URLs Ulf Harnhammar reported a possible buffer overflow in the handling of TFTP URLs in libcurl due to the lack of boundary checks. Impact : An attacker could exploit...
