2242 matches found
CVE-2004-0306
CVE-2004-0306 affects several Cisco ONS platforms (ONS 15327 prior to 4.1(3); ONS 15454 prior to 4.6(1); ONS 15454 SD prior to 4.1(3); Cisco ONS 15600 prior to 1.3(0)) where TFTP is enabled on UDP port 69 by default. This allows remote attackers to GET or PUT ONS system files on the current activ...
TFTP Server Detection
Binary data 1174.prm...
[NT] WinAgents TFTP Server Remote DoS (Long Filename)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
WinAgentsTFTP.txt
WinAgents TFTP Server Long File Remote Denial Of Service Vulnerability Date: 10 June 2004 Security Alert ID: 1008084 Added by: HH Description: A vulnerability in WinAgents TFTP Server has been reported, allowing a remote user to cause the TFTP service to crash. It is reported that a remote user c...
WinAgents TFTP Server 3.0 - Remote Buffer Overrun
WinAgents TFTP Server 3.0 - Remote Buffer Overrun source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames whe...
WinAgents TFTP Server 3.0 - Remote Buffer Overrun
source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames when a request is made for a file. A remote attacker...
Sweex/Unex routers unauthorized access
Router configuration, including cleratext password, can be accesses via TFTP...
[Full-Disclosure] Sweex 802.11g router/accesspoint config disclosure / remote config
Maniac Security Advisory 2004-01 Configuration disclosure on Wireless Accesspoint/Router SUMMARY Critical elements of the accesspoint's configuration can be discovered by any client connected to the accesspoint. This includes the administration username and password. AFFECTED PRODUCTS Sweex...
Foxmail 5.0 - 'PunyLib.dll' Remote Stack Overflow
/ fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow exploit C COPYRIGHT XFOCUS Security Team, 2004 All Rights Reserved ----------------------------------------------------------------------- Author : xfocus : http://www.xfocus.org Maintain : XFOCUS Security Team Version : 0.2...
Multiple bugs in Cisco ONS
DoS and unauthorized access via TFTP, FTP, SNMP, telnet...
CVE-2003-1264
TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...
Avaya Argent Office requests 'HoldMusic' file from broadcast address via TFTP
Overview This vulnerability allows unauthenticated users to upload call holding music to affected devices. Description The Avaya Argent Office sends broadcast TFTP requests to obtain a file named "HoldMusic" that is used to supply hold music for customers who dial into the device. Therefore, an...
Avaya Argent Office uses weak authentication for TFTP-based administrative control
Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...
CVE-2003-0729
Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename...
CVE-2003-0729
CVE-2003-0729 describes a buffer overflow in Tellurian TftpdNT 1.8 that can be triggered by a TFTP request with a long filename, allowing remote code execution. The vulnerability is documented across multiple sources (NVD CVE entry, CVE Record) with an impact profile indicating potential arbitrar...
[Full-Disclosure] Security Vulnerability in Tellurian TftpdNT (Long Filename)
Security Vulnerability in Tellurian TftpdNT Long Filename ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5RP0M1PAUM.html SUMMARY Tellurian TftpdNT http://www.tellurian.com.au/ is a TFTP server for Windows NT and...
TFTP Daemon Detection
The remote host is running a TFTP Trivial File Transfer Protocol daemon. TFTP is often used by routers and diskless hosts to retrieve their configuration. It can also be used by worms to propagate. C Tenable Network Security, Inc. Revised 19/02/05 by Martin O'Neal of Corsaire to make the detectio...
Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service
source: https://www.securityfocus.com/bid/7575/info It has been reported that a problem with Verilink broadband routers exists in the handling of TFTP packets. Because of this, an attacker could potentially deny service to legitimate users of the network...
Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service
Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service source: https://www.securityfocus.com/bid/7575/info It has been reported that a problem with Verilink broadband routers exists in the handling of TFTP packets. Because of this, an attacker could potentially deny...
