iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.24.02: http://www.idefense.com/advisory/10.24.02.txt Directory Traversal in SolarWinds TFTP Server October 24, 2002 I. BACKGROUND The SolarWinds TFTP Server has the ability to send and receive multiple files concurrently...

Multiple bugs in SolarWinds TFTP

Directory traversal, invalid exception handling...

SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal

source: https://www.securityfocus.com/bid/6045/info SolarWinds TFTP Server is distributed for the Microsoft Windows platform. The SolarWinds TFTP Server does not properly handle user-supplied input. Due to insufficient handling of user input, it is possible for a remote user to request arbitrary...

SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet

SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet source: https://www.securityfocus.com/bid/6043/info A problem in SolarWinds TFTP Server may result in a denial of service, and may have other ramifications. SolarWinds TFTP Server is distributed for the Microsoft Windows platform...

SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet

source: https://www.securityfocus.com/bid/6043/info A problem in SolarWinds TFTP Server may result in a denial of service, and may have other ramifications. SolarWinds TFTP Server is distributed for the Microsoft Windows platform. Under some circumstances, it may be possible to crash a vulnerable...

CVE-2002-0910: Undefined Security Weakness

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities 1 linux-ftpd, 2 pcnfsd, 3 tftp, 4 traceroute, or 5 from/to...

CVE-2002-0813

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service reset or modify configuration via a long filename...

TFTP Long Filename Vulnerability

...

Cisco TFTP Server Long Filename DoS (CSCdy03429)

Trivial File Transfer Protocol TFTP is a protocol which allows for easy transfer of files between network connected devices. A vulnerability has been discovered in the processing of filenames within a TFTP read request when Cisco IOS is configured to act as a TFTP server. This vulnerability is...

Phenoelit Advisory, 0815 ++ * - Cisco_tftp

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 ++-- Authors FX [email protected] FtR [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/Ciscotftp.txt Affected Products Cisco IOS Tested on IOS 11.1 - 11.3 Cisco Bug ID: not...

CVE-2002-0395

The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...

Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow

// source: https://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file name handling of Cisco IOS is vulnerable to a buffer overflow...

Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow

Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow // source: https://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file...

@stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities Issues: Red-M 1050 Access Point Management Web Server DoS Red-M 1050 Access Point Case Insensitive Passwords Red-M 1050 Access...

CVE-2001-1265

Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. dot dot attack...

CVE-2001-1261

Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file...

CVE-2001-1261

CVE-2001-1261 affects Avaya Argent Office 2.1. The vulnerability allows remote attackers to alter hold music by spoofing a legitimate server’s response to a TFTP broadcast and supplying an alternate HoldMusic file. Root cause is spoofed TFTP responses enabling an attacker to substitute playback m...

CVE-2001-1265

CVE-2001-1265 concerns a directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21. The issue allows remote attackers to perform unauthorized operations on arbitrary files using a .. (dot dot) path traversal technique. The CVSS vector from NVD indicates a network-accessible, low-c...

CVE-2001-1261: Undefined Security Weakness

Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file...

CVE-2001-1265: Undefined Security Weakness

Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. dot dot attack...