Lucene search
+L

96 matches found

Cvelist
Cvelist
•added 2023/08/14 8:48 p.m.•70 views

CVE-2023-20965

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.4AI score0.00639EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/08/14 8:48 p.m.•16 views

CVE-2023-20965

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.3AI score0.00639EPSS
SaveExploits0References4
Mend
Mend
•added 2023/08/14 8:48 p.m.•7 views

CVE-2023-20965

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS0.00639EPSS
SaveExploits0References4
osv_asb
osv_asb
•added 2023/08/01 12:00 a.m.•66 views

ASB-A-250574778

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS8.3AI score0.00639EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2009/12/23 6:30 p.m.•12 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

6.8AI score
SaveExploits0References4
NVD
NVD
•added 2009/12/23 6:30 p.m.•22 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS6.6AI score0.01215EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2009/12/23 6:30 p.m.•11 views

DEBIAN-CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS6.7AI score0.01215EPSS
SaveExploits0References1
Mend
Mend
•added 2009/12/23 6:00 p.m.•5 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

6.3CVSS0.01215EPSS
SaveExploits0References5
CVE
CVE
•added 2009/12/23 6:00 p.m.•69 views

CVE-2009-4404

CVE-2009-4404 concerns the TOFU Protection feature, specifically a vulnerability in t-prot before version 2.8. The issue is described as an unspecified vulnerability that allows remote attackers to cause a denial of service, related to the "--maxlines" option and a crafted email message. The conn...

4.3CVSS6.6AI score0.01215EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2009/12/23 6:00 p.m.•42 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS5.5AI score0.01215EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/23 12:00 a.m.•8 views

CVE-2009-4404: Undefined Security Weakness

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS6AI score0.01215EPSS
SaveExploits0References1
NVD
NVD
•added 2005/09/21 8:03 p.m.•34 views

CVE-2005-3008

Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes...

7.5CVSS7.6AI score0.01549EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2005/09/21 4:00 a.m.•46 views

CVE-2005-3008

Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes...

7.6AI score0.01549EPSS
SaveExploits0References4
CVE
CVE
•added 2005/09/21 4:00 a.m.•66 views

CVE-2005-3008

CVE-2005-3008 affects Tofu 0.2, where remote attackers can cause arbitrary Python code execution by sending crafted pickled objects that Tofu unpickles and executes. Root cause is untrusted unpickling of serialized data. The provided documents describe the vulnerability and its impact as remote c...

7.5CVSS8AI score0.01549EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/21 12:00 a.m.•9 views

CVE-2005-3008: Undefined Security Weakness

Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes...

7.5CVSS6.3AI score0.01549EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2005/09/19 12:00 a.m.•18 views

Tofu Server Detection

The remote host is running a Tofu server. Tofu is a network gaming engine. Make sure this service has been installed in accordance to your security policy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid19758;...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder