[DSECRG-09-036] Chance-i Techno Vision Security System - Directory Traversal File Download

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

Chance-i DiViS DVR System multiple security vulnerabilities

Web server directory traversal, ActiveX bufer overflow...

Chance-i DiViS DVR System Web-server Directory Traversal Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal...

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow (PoC)

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL:...

Chance-i DiViS DVR System Web-Server - Directory Traversal

Chance-i DiViS DVR System Web-Server - Directory Traversal Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/...

Chance-i DiViS DVR System Web-server Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ====================================================================== Chance-i DiViS DVR System Web-server Directory Traversal Vulnerability ====================================================================== Digital Security Research...

Chance-i DiViS DVR System Web-Server - Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

Chance-i DiViS-Web DVR System Active-X Control

Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL: http://www.chance-i.com/ Bug: Heap Overflow Exploits: YES Reported:...

Chance-i DiViS DVR System Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

Design/Logic Flaw

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

The CVE-2009-1092 entry describes a use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control (LIVEAU~1.OCX 7.0) used by GeoVision DVR systems. The flaw allows remote code execution when an attacker calls GetAudioPlayingTime with certain arguments, enabling arbitrary code exec...

CVE-2008-4380

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service crash via a malformed HTTP request, related to the filter for configuration properties and "/x" characters...

Design/Logic Flaw

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service crash via a malformed HTTP request, related to the filter for configuration properties and "/x" characters...

CVE-2008-4380

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service crash via a malformed HTTP request, related to the filter for configuration properties and "/x" characters...

CVE-2008-4380

The CVE-2008-4380 issue affects Samsung DVR SHR2040: the web interface can be remotely induced to crash by a malformed HTTP request, specifically tied to the filter for configuration properties and the inclusion of "/x" characters. The vulnerability leads to a denial of service on the affected de...

Samsung DVR SHR-2040 HTTPD拒绝服务漏洞

BUGTRAQ ID: 31047 CNCAN ID：CNCAN-2008090908 Samsung DVR SHR-2040是一款用于对TV广播，有线电视等传送进行记录的mini-PC。 Samsung DVR SHR-2040 WEB接口不正确处理HTTP请求，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 用于配置的CGIS文件过滤器存在未明错误，发送特殊构建的HTTP请求可导致应用程序崩溃。 Samsung SHR-2040 目前没有解决方案提供： http://www.samsung.com/ !/usr/bin/perl -w Samsung DVR SHR2040 HTT...

Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC

No description provided by source. !/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTP request NO...

Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC

Exploit for hardware platform in category dos / poc ========================================================== Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC ========================================================== !/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service...