[Full-disclosure] Flaw in AVM UPNP service for windows

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

DoS against AVM Fritz!Box 7050 (and others)

Denial of Service against AVM Fritz!Box 7050 and others Discovered by: Matthias Wenzel Advisory: http://mazzoo.de/blog/2007/01/18FritzBoxDoS Manufacturer: AVM www.avm.de Product: Fritz!Box 750 and others Vendor was notified 6 month ago see blog entry by Matthias Sending a zero-length UDP packet t...

avm-traversal.txt

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

AVM Fritz!Box VoIP router DoS

Crash on empty UDP packet to UDP/5060 SIP port...

CVE-2007-0357

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

Directory traversal

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

CVE-2007-0357 is a directory traversal vulnerability in the AVM IGD CTRL Service of Fritz!DSL 02.02.29. The issue allows remote attackers to read arbitrary files via URL-encoded dot-dot backslash sequences (..%5C) in a URI requested from the AR7 webserver. Affected component is the AVM IGD CTRL S...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to retrieve t...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-suppli...

CVE-2000-0262

The CVE-2000-0262 issue affects AVM KEN! ISDN Proxy Server. A malformed request can trigger a denial-of-service, as reported by multiple sources. The Nessus plugin specifies a remote DoS resulting in a crash/segmentation fault when the server is sent a non-HTTP request, and notes that exploitatio...

CVE-2000-0261

The AVM KEN! web server is affected by CVE-2000-0261. The vulnerability is a directory traversal (.. attack) that allows remote attackers to read arbitrary files. Reported impact is partial confidentiality with no impact on integrity or availability. CVSSv2 in the provided data assigns MEDIUM bas...

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0262

The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request...

AVM KEN! ISDN Proxy Server Malformed Request Remote DoS

It was possible to crash the remote service - very likely Ken! ISDN Proxy Software - by sending it a non-HTTP request. Note that in the case of the Ken!, exploitation requires that the attacker be on the local network. C Tenable Network Security, Inc. include"compat.inc"; if description...

AVM Ken! позволяет получить любой файл с сервера

C proxy-сервера может быть получен любой файл с использованием обратного пути в директории, кроме того может быть организована DoS-атака...

CVE-2000-0262

The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request...

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

AVM KEN! 1.3.101.4.30 - Remote Denial of Service

AVM KEN! 1.3.101.4.30 - Remote Denial of Service source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular...

AVM KEN! 1.3.10/1.4.30 - Remote Denial of Service

source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular web file structure, and appending the remaining...