PT-2012-5165 · D Link · D-Link Dcs-932L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-932L camera version 1.02 Description: The issue allows remote attackers to discover the password via a UDP broadcast packet. This can be demonstrated by running the D-Link Setup Wizard and reading the paramR"P" value...

D-Link DCS-932L UDP请求处理密码泄露漏洞

BUGTRAQ ID: 57011 CVECAN ID: CVE-2012-4046 D-Link DCS-932L 是无线网络摄像机。 D-Link DCS-932L 1.02及其他版本在处理设备密码的UDP请求时存在错误，攻击者可利用此漏洞获取Base64编码的密码。 0 D-Link DCS-932L 1.02 厂商补丁： D-Link ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dlink.com/...

CVE-2012-5319

Cross-site request forgery CSRF vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter...

Stack overflow

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string argument...

CVE-2012-5306

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string argument...

CVE-2012-5306

CVE-2012-5306 affects the D-Link DCS-5605 PTZ IP Network Camera via the DcsCliCtrl.dll ActiveX control. The vulnerability is a stack-based buffer overflow in the SelectDirectory method that can be triggered by a long string argument, leading to a remote denial of service (crash) and potentially a...

D-Link DCS-5605 Network Surveillance DcsCliCtrl.dll ActiveX Control SelectDirectory() Method Buffer Overflow

The remote host has the D-Link DCS-5605 Network Surveillance DcsCliCtrl.dll ActiveX control installed. This control fails to properly parse data supplied to the 'SelectDirectory' function due to an unsafe call to 'lstrcpyW', which can lead to a stack buffer overflow. By tricking a user into openi...

D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability

D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 7/8 Live demo: http://203.125.227.70/eng/index.cgi username: dlink password: dlink product homepage:...

D-Link DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll

Exploit for windows platform in category remote exploits D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 7/8 Live demo:...

D-Link DCS-5605 Network Surveillance - ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow

D-Link DCS-5605 Network Surveillance - ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer...

D-Link DCS-5605 Network Surveillance - ActiveX Control 'DcsCliCtrl.dll' lstrcpyW Remote Buffer Overflow

D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 7/8 Live demo: http://203.125.227.70/eng/index.cgi username: dlink password: dlink product homepage:...

Dlink DCS series CSRF change the administrative password-vulnerability warning-the black bar safety net

Title: Dlink DCS series CSRF Change Admin Password Affected version: DCS-9 0 0, DCS-2 0 0 0, DCS-5 3 0 0 and possibly other. Author: rigan - [email protected] -- A description of the problem: Dlink DCS is a camera series These cameras with the one containing the csrf flaw in the web interface Thi...

D-Link DCS Series Cross Site Request Forgery

Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface which is prone to CSRF vulnerabilitie...

D-Link DCS - 'security.cgi' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service...

D-Link DCS - security.cgi Cross-Site Request Forgery

D-Link DCS - security.cgi Cross-Site Request Forgery source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device,...

D-Link DCS Series - Cross-Site Request Forgery (Change Admin Password)

D-Link DCS Series - Cross-Site Request Forgery Change Admin Password Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras...

D-Link DCS Series - Cross-Site Request Forgery (Change Admin Password)

Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface which is prone to CSRF vulnerabilitie...

Dlink DCS series CSRF Change Admin Password

Exploit for hardware platform in category web applications Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These camera...

CVE-2010-4965

/etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server...