2521 matches found
CVE-2002-0395
The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...
Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow
Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow // source: https://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file...
Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow
// source: https://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file name handling of Cisco IOS is vulnerable to a buffer overflow...
@stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities Issues: Red-M 1050 Access Point Management Web Server DoS Red-M 1050 Access Point Case Insensitive Passwords Red-M 1050 Access...
CVE-2001-1261
CVE-2001-1261 affects Avaya Argent Office 2.1. The vulnerability allows remote attackers to alter hold music by spoofing a legitimate server’s response to a TFTP broadcast and supplying an alternate HoldMusic file. Root cause is spoofed TFTP responses enabling an attacker to substitute playback m...
CVE-2001-1265
CVE-2001-1265 concerns a directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21. The issue allows remote attackers to perform unauthorized operations on arbitrary files using a .. (dot dot) path traversal technique. The CVSS vector from NVD indicates a network-accessible, low-c...
CVE-2001-1265
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. dot dot attack...
CVE-2001-1261
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file...
CVE-2001-1265: Undefined Security Weakness
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. dot dot attack...
CVE-2001-1261: Undefined Security Weakness
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file...
CVE-2001-0783
Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...
CVE-2001-0783
CVE-2001-0783 : Cisco TFTP server 1.1 is vulnerable to a remote directory-traversal via the GET command (.. attack) that can read arbitrary files. Official CVSS v2.0 metrics indicate a base score of 5.0 (Network, Low attack complexity, no authentication) with partial confidentiality impact and no...
CVE-2001-0783
Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...
CVE-2001-0783: Undefined Security Weakness
Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...
CVE-1999-1421
CVE-1999-1421 affects NBase switches NH208 and NH215 that run a TFTP server. The vulnerability arises from the TFTP service allowing remote attackers to influence software updates by guessing default target filenames, enabling modification of the switch or triggering a denial-of-service (crash). ...
CVE-1999-1421
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service crash by guessing the target filenames, which have default names...
CVE-1999-1421: Undefined Security Weakness
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service crash by guessing the target filenames, which have default names...
Многочисленные дырки в Avaya Argent Office (DoS, weak password, empty SNMP password, tftp file spoofing)
Многочисленные дырки...
CVE-2001-1261
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file...
IBM TFTP Server for Java vulnerability
Vulnerability: The IBM alphaWorks TFTP Server for Java available at http://alphaworks.ibm.com/tech/TFTP is vulnerable to a standard directory traversal attack i.e. ../../. Vendor Response: The vendor was contacted on 19 June 2001 and responded on 20 June 2001 as follows: "We will take a look at t...