[SA13033] Chesapeake TFTP Server Directory Traversal and Denial of Service

TITLE: Chesapeake TFTP Server Directory Traversal and Denial of Service SECUNIA ADVISORY ID: SA13033 VERIFY ADVISORY: http://secunia.com/advisories/13033/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information, DoS, System access WHERE: From local network SOFTWARE: Chesapeake TFT...

inetutils tftp client buffer overflow

Buffer overflow during name resolution...

inetutils tftp client, DNS resolving bofs

Subject: GNU tftp client remote buffer overflows. ++++++++++++++++++++++++++++++++++++++++++++ Product: The tftp client that comes with the inetutils package. It's found on all unices I know of. ++++++++++++++++++++++++++++++++++++++++++++ Vulnerable: inetutils-1.4.2 was the only version audited...

CVE-2004-1636

Heap-based buffer overflow in the WvTFTPServer::newconnection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet...

Cisco TFTP Server Long Filename DoS (Bug ID CSCdy03429)

Binary data 2245.prm...

Cisco TFTP Server Long Filename DoS (Bug ID CSCdy03429)

Binary data 2244.prm...

Cisco TFTP Server Long Filename DoS (Bug ID CSCdy03429)

Binary data 2243.prm...

CVE-2004-0306

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...

CVE-2002-0395

CVE-2002-0395 affects the Red-M 1050 Bluetooth Access Point: its TFTP server supply chain cannot be disabled, enabling an attacker to crack the administration password via UDP-based attacks. The vulnerability comes from the TFTP server being always active, which, combined with weak admin-password...

CVE-2002-0395

The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...

CVE-2004-0306

CVE-2004-0306 affects several Cisco ONS platforms (ONS 15327 prior to 4.1(3); ONS 15454 prior to 4.6(1); ONS 15454 SD prior to 4.1(3); Cisco ONS 15600 prior to 1.3(0)) where TFTP is enabled on UDP port 69 by default. This allows remote attackers to GET or PUT ONS system files on the current activ...

CVE-2004-0306: Undefined Security Weakness

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...

CVE-2002-0395: Undefined Security Weakness

The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...

TFTP Server Detection

Binary data 1174.prm...

[NT] WinAgents TFTP Server Remote DoS (Long Filename)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

WinAgentsTFTP.txt

WinAgents TFTP Server Long File Remote Denial Of Service Vulnerability Date: 10 June 2004 Security Alert ID: 1008084 Added by: HH Description: A vulnerability in WinAgents TFTP Server has been reported, allowing a remote user to cause the TFTP service to crash. It is reported that a remote user c...

WinAgents TFTP Server 3.0 - Remote Buffer Overrun

WinAgents TFTP Server 3.0 - Remote Buffer Overrun source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames whe...

WinAgents TFTP Server 3.0 - Remote Buffer Overrun

source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames when a request is made for a file. A remote attacker...

Sweex/Unex routers unauthorized access

Router configuration, including cleratext password, can be accesses via TFTP...

[Full-Disclosure] Sweex 802.11g router/accesspoint config disclosure / remote config

Maniac Security Advisory 2004-01 Configuration disclosure on Wireless Accesspoint/Router SUMMARY Critical elements of the accesspoint's configuration can be discovered by any client connected to the accesspoint. This includes the administration username and password. AFFECTED PRODUCTS Sweex...