48 matches found
SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
Exploit Title: SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path Exploit Author: Mert DAŞ Version: 3.11.8 Date: 14.10.2021 Vendor Homepage: https://www.solarwinds.com/ Tested on: Windows 10 Step to discover Unquoted Service Path : -------------------------------------- C:\Users\Mertsc qc...
SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path Vulnerability
Exploit Title: SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path Exploit Author: Mert DAŞ Version: 3.11.8 Vendor Homepage: https://www.solarwinds.com/ Tested on: Windows 10 Step to discover Unquoted Service Path : -------------------------------------- C:\Users\Mertsc qc CatTools SC...
SolarWinds Kiwi CatTools Elevation of Privilege Vulnerability
SolarWinds network security management software products. The application can be installed on windows systems with the option to select the default security service. The default installation path "C:\Program Files x86" is selected when installing the 32-bit application, which may allow an...
SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation
SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation Document Title: ================ SolarWinds Kiwi CatTools Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction...
SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation
Exploit for windows platform in category local exploits Document Title: ================ SolarWinds Kiwi CatTools Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction:...
SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation
Document Title: ================ SolarWinds Kiwi CatTools Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction: ================================ Kiwi CatTools saves you time by automating...
Kiwi CatTools TFTP <= 3.2.8 - Remote Path Traversal Vulnerability
No description provided by source. Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn.t properly verify filename in PUT and GET request which can be used ...
Kiwi CatTools < 3.2.9 Directory Traversal - Active Check
The remote host appears to be running Kiwi CatTools, a freeware application for device configuration management and is affected by a directory traversal vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
Kiwi CatTools < 3.2.9 Directory Traversal - Active Check
The remote tftpd server is affected by a directory traversal vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
kiwicat-exec.txt
Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn't properly verify filename in PUT and GET request which can be used to download/upload any file from/to...
Kiwi CatTools < 3.2.9 TFTP Server Traversal Arbitrary File Manipulation
The remote host appears to be running Kiwi CatTools, a freeware application for device configuration management. The TFTP server included with the version of Kiwi CatTools installed on the remote host fails to sanitize filenames of directory traversal sequences. An attacker can exploit this issue...
Kiwi CatTools TFTP <= 3.2.8 Remote Path Traversal Vulnerability
No description provided by source. Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn.t properly verify filename in PUT and GET request which can be used ...
[Full-disclosure] Kiwi CatTools TFTP server path traversal
Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn't properly verify filename in PUT and GET request which can be used to download/upload any file from/to...
Kiwi CatTools TFTP <= 3.2.8 Remote Path Traversal Vulnerability
Exploit for unknown platform in category remote exploits =============================================================== Kiwi CatTools TFTP tftp -i 10.1.1.2 GET /x/../../../../../boot.ini boot.txt Transfer successful: 212 bytes in 1 second, 212 bytes/s C:\type boot.txt boot loader timeout=30...
Kiwi CatTools TFTP 3.2.8 - Directory Traversal
Kiwi CatTools TFTP 3.2.8 - Directory Traversal Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn.t properly verify filename in PUT and GET request which...
Kiwi CatTools TFTO directory traversal
Built-in TFTP server directory traversal...
Kiwi CatTools TFTP 3.2.8 - Directory Traversal
Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn.t properly verify filename in PUT and GET request which can be used to download/upload any file from/to...
Kiwi CatTools TFTP目录遍历漏洞
Kiwi CatTools是一个管理网络设备如路由器、交换机与防火墙的工具。 CatTools TFTP服务器处理请求时存在输入验证漏洞，远程攻击者可能利用此漏洞遍历服务器目录访问任意文件。 CatTools TFTP服务器没有正确检查请求文件路径中的目录遍历串，允许远程攻击者通过特制的目录遍历序列向TFTP根目录以外的任意位置上传或下载任意文件。 Kiwi CatTools 3.2.0 beta 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kiwisyslog.com/cattools-info.php tftp -i 10.11.12.1...
cattools-traverse.txt
TFTP directory traversal in Kiwi CatTools Application : Kiwi CatTools prior to 3.2.0 beta Release Date : 8 February 2007 Author : Nicob Product : ========= http://www.kiwisyslog.com/cattools-info.php : "Kiwi CatTools is a freeware application that provides automated device configuration managemen...
CVE-2007-0889
Kiwi CatTools before 3.2.0 beta uses weak encryption "reversible encoding" for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal...