EUVD-2009-4717

Malware in sbrugna...

Buffer overflow

Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial of service TCP/IP outage via long arguments to the 1 XRMD, 2 delete, 3 RNFR, or 4 RNTO command...

CVE-2009-4753

Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial of service TCP/IP outage via long arguments to the 1 XRMD, 2 delete, 3 RNFR, or 4 RNTO command...

CVE-2009-4753

Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial of service TCP/IP outage via long arguments to the 1 XRMD, 2 delete, 3 RNFR, or 4 RNTO command...

CVE-2009-4753

The CVE-2009-4753 issue affects the Addonics NAS Adapter NASU2FW41 (loader 1.17) FTP server. It arises from buffer overflows in the FTP service when processing long arguments for XRMD, DELETE, RNFR, and RNTO commands, leading to a denial of service (TCP/IP outage). Documents identify the affected...

Addonics NAS Adapter FTP Server多个命令远程缓冲区溢出漏洞

Bugraq ID: 34796 CNCAN ID：CNCAN-2009050301 Addonics NAS Adapter是一款用于向LAN增加任意USB存储设备的小型适配器。 Addonics NAS Adapter包含的FTP服务器存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 其中对RMDIR, Delete, Rename命令提交的参数缺少充分边界检查，构建恶意字符串作为命令参数，可触发缓冲区溢出，以应用程序权限执行任意指令。 Addonics NAS Adapter NASU2FW41 目前没有解决方案提供：...

Addonics NAS Adapter FTP Denial Of Service

!/usr/bin/python Addonics NAS Adapter FTP server DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Since the HTTP server was so vulnerable, is this really a suprise? Greetz to muts and loganWHD, I tried harder...

Addonics NAS Adapter multiple security vulnerabilities

Buffer overflow with HTTP requests, FTP DoS...

Addonics NAS Adapter FTP Remote Denial of Service

Remote: yes Local: no Credit: Mike Cyr, aka h00die Vulnerable: NASU2FW41 Loader 1.17 Not Vulnerable: Discussion: The FTP server included with the Addonics NAS Adapter is vulnerable to 3 remote BoF conditions which result in a DoS and requires a device reboot as the entire tcp/ip stack is crashed...

Addonics NAS Adapter FTP Remote Denial of Service Exploit

No description provided by source. !/usr/bin/python Addonics NAS Adapter FTP server DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Since the HTTP server was so vulnerable, is this really a suprise? Greetz to muts and loganWHD, I tried harder...

Addonics NAS Adapter FTP - Remote Denial of Service

Addonics NAS Adapter FTP - Remote Denial of Service !/usr/bin/python Addonics NAS Adapter FTP server DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Since the HTTP server was so vulnerable, is this really a suprise? Greetz to muts and loganWHD, I...

Addonics NAS Adapter FTP - Remote Denial of Service

!/usr/bin/python Addonics NAS Adapter FTP server DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Since the HTTP server was so vulnerable, is this really a suprise? Greetz to muts and loganWHD, I tried harder...

Addonics NAS Adapter FTP Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================= Addonics NAS Adapter FTP Remote Denial of Service Exploit ========================================================= !/usr/bin/python Addonics NAS Adapter FTP server DoS Tested against...

Addonics NAS Adapter 'bts.cgi'远程缓冲区溢出漏洞

BUGTRAQ ID: 34607 CNCAN ID：CNCAN-2009042101 ddonics NAS Adapter是一款增加任意USB存储设备到LAN的解决方案。 Addonics NAS Adapter cgi存在缓冲区溢出，远程攻击者可以利用漏洞使应用程序崩溃。 提交特殊的GET请求，可触发此漏洞，可能以应用程序权限执行任意指令。 Adapter NASU2FW41 目前没有解决方案提供： http://www.addonics.com/products/nas/nasu2.asp !/bin/bash Addonics NAS Adapter bts.cgi...

Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

No description provided by source. !/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and...

Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

Remote: Yes Local: No Credit: Mike Cyr, aka h00die Vulnerable: NASU2FW41 Loader 1.17 Not Vulnerable: Discussion: Addonics NAS Adapter Post-Auth DoS Addonics NAS Adapter is prone to several post authentication buffer overflows. Each of these buffer overflows will crash the entire TCP/IP stack and...

Addonics NAS Adapter Denial Of Service

!/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and loganWHD, I tried harder...

Addonics NAS Adapter - bts.cgi (Authenticated) Remote Denial of Service

Addonics NAS Adapter - bts.cgi Authenticated Remote Denial of Service !/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and...

Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

Exploit for hardware platform in category dos / poc ============================================================= Addonics NAS Adapter bts.cgi Remote DoS Exploit post-auth ============================================================= !/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested...

Addonics NAS Adapter - 'bts.cgi' (Authenticated) Remote Denial of Service

!/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and loganWHD, I tried harder...