WinAgents TFTP Server 3.0 - Remote Buffer Overrun

source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames when a request is made for a file. A remote attacker...

Sweex/Unex routers unauthorized access

Router configuration, including cleratext password, can be accesses via TFTP...

[Full-Disclosure] Sweex 802.11g router/accesspoint config disclosure / remote config

Maniac Security Advisory 2004-01 Configuration disclosure on Wireless Accesspoint/Router SUMMARY Critical elements of the accesspoint's configuration can be discovered by any client connected to the accesspoint. This includes the administration username and password. AFFECTED PRODUCTS Sweex...

Foxmail 5.0 - 'PunyLib.dll' Remote Stack Overflow

/ fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow exploit C COPYRIGHT XFOCUS Security Team, 2004 All Rights Reserved ----------------------------------------------------------------------- Author : xfocus : http://www.xfocus.org Maintain : XFOCUS Security Team Version : 0.2...

Multiple bugs in Cisco ONS

DoS and unauthorized access via TFTP, FTP, SNMP, telnet...

CVE-2003-1264

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

Avaya Argent Office requests 'HoldMusic' file from broadcast address via TFTP

Overview This vulnerability allows unauthenticated users to upload call holding music to affected devices. Description The Avaya Argent Office sends broadcast TFTP requests to obtain a file named "HoldMusic" that is used to supply hold music for customers who dial into the device. Therefore, an...

Avaya Argent Office uses weak authentication for TFTP-based administrative control

Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...

CVE-2003-0729

Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename...

CVE-2003-0729

CVE-2003-0729 describes a buffer overflow in Tellurian TftpdNT 1.8 that can be triggered by a TFTP request with a long filename, allowing remote code execution. The vulnerability is documented across multiple sources (NVD CVE entry, CVE Record) with an impact profile indicating potential arbitrar...

CVE-2003-0729: Undefined Security Weakness

Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename...

[Full-Disclosure] Security Vulnerability in Tellurian TftpdNT (Long Filename)

Security Vulnerability in Tellurian TftpdNT Long Filename ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5RP0M1PAUM.html SUMMARY Tellurian TftpdNT http://www.tellurian.com.au/ is a TFTP server for Windows NT and...

TFTP Daemon Detection

The remote host is running a TFTP Trivial File Transfer Protocol daemon. TFTP is often used by routers and diskless hosts to retrieve their configuration. It can also be used by worms to propagate. C Tenable Network Security, Inc. Revised 19/02/05 by Martin O'Neal of Corsaire to make the detectio...

Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/7575/info It has been reported that a problem with Verilink broadband routers exists in the handling of TFTP packets. Because of this, an attacker could potentially deny service to legitimate users of the network...

Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service

Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service source: https://www.securityfocus.com/bid/7575/info It has been reported that a problem with Verilink broadband routers exists in the handling of TFTP packets. Because of this, an attacker could potentially deny...

CVE-2002-0813

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service reset or modify configuration via a long filename...

CVE-2002-0813

CVE-2002-0813 corresponds to a heap-based buffer overflow in the TFTP server capability of Cisco IOS 11.1/11.2/11.3. The vulnerability can be triggered by a long TFTP read filename, allowing remote attackers to cause a denial of service (reset) or modify configuration. OpenVAS/Nessus entries desc...

CVE-2002-0813: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service reset or modify configuration via a long filename...

CVE-2002-1542

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

CVE-2002-1542

The CVE refers to SolarWinds TFTP server 5.0.55 and earlier. Affected component: the TFTP server handling of UDP datagrams. Root cause: processing a large UDP datagram can cause a crash, with OpenVAS/NASL and Nessus entries describing the overflow risk. Documented impact: denial of service via se...