CVE-2005-0275

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...

CVE-2001-1426

Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...

CVE-2001-1426

Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...

Cisco IOS TFTP File Disclosure

The remote host has a TFTP server installed that is serving one or more Cisco IOS files. These files may contain passwords and other sensitive information. A remote attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 This NASL script was written by Martin O'Neal of...

Cisco IOS Device TFTP Certificate Authority (CA) File Detection

The remote host has a TFTP server installed that is serving one or more Cisco IOS Certificate Authority CA files. These files may include the private key for the CA, which is information that should be considered sensitive. This NASL script was written by Martin O'Neal of Corsaire...

CVE-2004-1636

CVE-2004-1636 describes a heap-based buffer overflow in the WvTFTPServer::new_connection function (wvtftpserver.cc) of WvTftp 0.9. An attacker can trigger it by sending a TFTP packet with a long option string, leading to remote code execution. The NVD entry rates it as HIGH severity (CVSS v2 base...

CVE-2004-1636

Heap-based buffer overflow in the WvTFTPServer::newconnection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

CVE-2004-1485

CVE-2004-1485: Buffer overflow in the TFTP client of InetUtils 1.4.2 allows a remote DNS server to drive a large DNS response into gethostbyname, enabling arbitrary code execution. The connected documents confirm the vulnerability but do not provide remediation steps or explicit exploit details b...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

CVE-2005-0275

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...

CVE-2005-0275

The CVE-2005-0275 entry concerns 3Com 3CDaemon 2.0 revision 10, where TFTP handling allows remote denial of service via a GET request containing an MS-DOS device name. The issue is triggered by a crafted TFTP GET and results in an application crash, constituting partial availability impact. The s...

Cisco ONS Multiple Remote Vulnerabilities (20040219-ONS)

According to its version number, the remote Cisco ONS platform has the following vulnerabilities : - The TFTP server allows unauthenticated access to TFTP GET and PUT commands. An attacker may exploit this flaw to upload or retrieve the system files of the remote ONS platform. - A denial of servi...

3Com 3CDaemon Multiple Vulnerabilities

3Com 3CDaemon Multiple Vulnerabilities By Sowhat 04.JAN.2005 http://secway.org/advisory/ad20041011.txt I.T.S Security Research Team Product Affected: 3Com 3CDaemon 2.0 revision 10 Vendor: www.3Com.com 1 BACKGROUD 3CDaemon is a free popular TFTP, FTP, and Syslog daemon for Microsoft Windows...

ad20041011.txt

3Com 3CDaemon Multiple Vulnerabilities By Sowhat 04.JAN.2005 http://secway.org/advisory/ad20041011.txt I.T.S Security Research Team Product Affected: 3Com 3CDaemon 2.0 revision 10 Vendor: www.3Com.com 1 BACKGROUD 3CDaemon is a free popular TFTP, FTP, and Syslog daemon for Microsoft Windows...

CVE-2004-2432

WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

CVE-2004-2455

Sweex Wireless Broadband Router/Accesspoint 802.11g LC000060 allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file...

CVE-2004-0952

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...

CVE-2004-0951

The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...