Authentication flaw

ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

CVE-2006-2559

Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

CVE-2006-2560

The connected sources confirm a vulnerability in Sitecom WL-153 router firmware prior to 1.38. A UPnP request with a modified InternalClient parameter is not validated, allowing remote attackers to bypass access restrictions and perform unauthorized operations, demonstrated via AddPortMapping to ...

CVE-2006-2560

Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

CVE-2006-2561

CVE-2006-2561 affects the Edimax BR-6104K router. A UPnP flaw allows remote attackers to bypass access restrictions by sending a modified InternalClient parameter (potentially within NewInternalClient) which is not validated, demonstrated by using AddPortMapping to forward arbitrary traffic. Root...

CVE-2006-2562

The CVE-2006-2562 entry concerns the ZyXEL P-335WT router. A UPnP flaw (InternalClient parameter not validated) allows remote attackers to bypass access restrictions and perform unauthorized operations, demonstrated by using AddPortMapping to forward arbitrary traffic. According to NVD, the vulne...

CVE-2006-2559

Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

CVE-2006-2562

ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

CVE-2006-2559

CVE-2006-2559 affects Linksys WRT54G Wireless-G Broadband Router. A UPnP request with a modified InternalClient parameter, which is not validated, allows remote attackers to bypass access restrictions and perform unauthorized operations, demonstrated by using AddPortMapping to forward arbitrary t...

CVE-2006-2110

Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...

CVE-2005-4174

eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing 1 install.php or 2 upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration...

CVE-2005-4174

CVE-2005-4174 affects eFiction versions 1.0, 1.1, and 2.0. The issue allows remote attackers to perform unauthorized operations by directly accessing install.php or upgrade.php. It is unclear whether the flaw originates from eFiction itself or from improper system administration (e.g., leftover u...

CVE-2005-4174

eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing 1 install.php or 2 upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration...

CVE-2003-0887

The CVE-2003-0887 entry concerns ez-ipupdate (versions 3.0.11b7 and earlier) that creates insecure temporary cache files, enabling a local user to perform unauthorized operations via a symlink attack on the ez-ipupdate.cache file. The linked SUSE/other entries reiterate the same flaw without prov...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...

CVE-2005-3121

The CVE-2005-3121 issue affects module-assistant prior to version 0.9.10. A rule file used by this tool creates a temporary file insecurely, enabling local users to perform unauthorized operations. Public advisories (DSA-867-1) from Debian and related OpenVAS/NVD entries corroborate the local-fil...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...