Metamorphosis file transfer method(tftp, ftp, iget. vbe are cool)-vulnerability warning-the black bar safety net

The system user does not log in the case of testing, of course, landing the better, huh? -----------------Cute dividing line--------------------------- | "Wollf Remote Manager" v1. 6 Code by wollf, http://www.xfocus.org wsdd-wb7egq0ebt at C:\WINNT\system32dos Microsoft Windows 2 0 0 0 Version 5...

CVE-2005-3032

Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a TFTP request with a long filename argument...

CVE-2005-3032

CVE-2005-3032: Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause denial of service and possibly execute arbitrary code via a TFTP request with a long filename argument. No exploitation details or fixes are provided in the supplied documents; remediation status is not specified.

vxTftpSrv TFTP server for Pocket PC buffer overflow

Buffer overflow on oversized file name...

HP Ignite-UX TFTP /etc/pass File Disclosure

The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. A remote attacker could use this information to mount further attacks. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com T...

HP Ignite-UX TFTP File Access Information Disclosure

The remote host has a TFTP server installed that is serving one or more HP Ignite-UX files. These files may contain sensitive information. A remote attacker could use this information to mount further attacks. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com The...

Cisco CallManager TFTP File Detection

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. These files do not themselves include any sensitive information, but do identify the TFTP server as being part of a Cisco CallManager environment. The CCM TFTP server is an essential part of providing...

HP-UX Ignite-UX TFTP Service Remote File Manipulation

The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. A remote attacker could exploit this to upload arbitrary files. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com T...

CVE-2004-2455

Sweex Wireless Broadband Router/Accesspoint 802.11g LC000060 allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file...

CVE-2004-2455

The CVE-2004-2455 entry concerns the Sweex LC000060 Wireless Broadband Router/Accesspoint (802.11g). The vulnerability allows remote attackers to obtain sensitive information and potentially gain privileges by using TFTP to download the nvram file, from which username, password, and other data ca...

CVE-2004-0952

Affected software : HP-UX B.11.00–B.11.23 running Ignite-UX. Vulnerability : the add_new_client operation in Ignite-UX causes the TFTP server to grant world-writable permissions to part of the directory tree. Impact : remote attackers could modify data or trigger disk consumption via unauthorized...

CVE-2004-0951

The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...

CVE-2004-0952

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...

CVE-2004-0951

HP Ignite-UX: The TFTP service’s make_recovery command (pre-C.6.2.241) copies the password file within the TFTP directory tree, enabling remote disclosure of /etc/passwd. Affected: HP-UX Ignite-UX TFTP server. Impact: partial confidentiality. Remediation: upgrade to C.6.2.241 or later (HP Ignite-...

CVE-2004-2432

WinAgents TFTP Server 3.0 is affected. The vulnerability arises when handling a request for a file with a long file name, likely caused by an off-by-one buffer overflow, leading to denial of service (server crash). The available sources describe the impact as a crash/DDoS-like availability issue ...

CVE-2004-2432

WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...

Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue

-- Corsaire Security Advisory -- Title: HP Ignite-UX filesystem permissions issue Date: 23.11.04 Application: HP Ignite-UX prior to version C.6.2.241 Environment: HP-UX Author: Martin O'Neal [email protected] Audience: General distribution Reference: c041123-002 -- Scope -- The aim of thi...

Multiple HP Ignite-UX deployment tool vulnerabilities

/etc/passwd copy is available via TFTP, TFTP filesystem is world writable...

Futuresoft TFTP Server multiple vulnerabilities

Directory traversal, buffer overflow...

CVE-2002-1968

The CVE-2002-1968 entry describes a vulnerability in Com21 DOXport 1100 series cable modems (firmware 2.1.1.106 and possibly earlier than 2.1.1.108.003). The issue: a device may download a DOCSIS configuration file from a malicious TFTP server on the internal network, enabling local users to modi...