520 matches found
Firefly MediaServer HTTP Header Multiple DoS Vulnerabilities
This host is running Firefly MediaServer and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbfireflymediaservermultdosvuln.nasl 5841 2017-04-03 12:46:41Z cfi $ Firefly MediaServer HTTP Header Multiple DoS Vulnerabilities Authors: Rachana Shetty Copyright:...
Firefly MediaServer HTTP Header Multiple DoS Vulnerabilities
Firefly MediaServer is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FireFly Mediaserver 1.0.0.1359 NULL Pointer Dereference
FireFly Mediaserver version 1.0.0.1359 suffers from a denial of service vulnerability that can be triggered by a NULL pointer dereference. Product: FireFly Mediaserver Vendor: FireFly Vulnerable Versions: 1.0.0.1359 and probably prior Tested Version: 1.0.0.1359 in Windows 7 SP1 Vendor Notificatio...
FireFly Media Server Multiple Remote DoS Vulnerabilities
High-Tech Bridge Security Research Lab has discovered multiple remote denial of service DoS vulnerabilities in FireFly Media Server, which could be exploited by a malicious person to crash a remote server. 1 Multiple NULL pointer dereference vulnerabilities in FireFly Media Server: CVE-2012-5875...
Firefly Media Server ws_getpostvars Function Content-Length Header HTTP Request Handling Overflow
The remote host is running Firefly Media Server, also known as mt-daapd, a media streaming server. The version of Firefly Media Server installed on the remote host apparently fails to sanitize user-supplied Content-Length field before using it to the call to 'malloclen+1' in 'src/webserver.c'...
Firefly媒体服务器畸形Content-Length字段堆溢出漏洞
BUGTRAQ ID: 28860 CVECAN ID: CVE-2008-1771 Firefly是Roku SoundBridge和iTunes所使用的开源媒体服务器。 Firefly的src/webserver.c文件的wsgetpostvars函数中存在堆溢出漏洞，如果远程攻击者向服务区发送了带有负数Content-Length值的POST请求的话就可以触发这个溢出，导致拒绝服务或执行任意指令。 以下是src/webserver.c文件中的漏洞代码： 707 int wsgetpostvarsWSCONNINFO pwsc 708 char contentlength; 709...
Integer overflow
Integer overflow in the wsgetpostvars function in Firefly Media Server formerly mt-daapd 0.2.4.1 0.9r1696-1.2 on Debian allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a large Content-Length...
CVE-2008-1771
Integer overflow in the wsgetpostvars function in Firefly Media Server formerly mt-daapd 0.2.4.1 0.9r1696-1.2 on Debian allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a large Content-Length...
CVE-2008-1771
Integer overflow in the wsgetpostvars function in Firefly Media Server formerly mt-daapd 0.2.4.1 0.9r1696-1.2 on Debian allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a large Content-Length...
CVE-2008-1771
CVE-2008-1771 describes an integer overflow in ws_getpostvars in mt-daapd (Firefly Media Server) v0.2.4.1 and related builds, triggered by a large HTTP POST Content-Length. This can cause a heap buffer overflow with potential remote code execution, alongside denial of service. Connected advisorie...
CVE-2008-1771
Integer overflow in the wsgetpostvars function in Firefly Media Server formerly mt-daapd 0.2.4.1 0.9r1696-1.2 on Debian allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a large Content-Length...
Multi-Threaded DAAP Daemon: Multiple vulnerabilities
Background Multi-Threaded DAAP Daemon mt-daapd, also known as the Firefly Media Server, is a software to serve digital music to the Roku Soundbridge and Apple's iTunes. Description nnp discovered multiple vulnerabilities in the XML-RPC handler in the file webserver.c. The wsaddarg function contai...
Firefly Media Server Limited Directory Traversal Admin Credential Disclosure
The remote host is running Firefly Media Server, also known as mt-daapd, a media streaming server. The version of Firefly Media Server installed on the remote Windows host allows an attacker to retrieve arbitrary files, possibly bypassing authentication, from the parent directory of Firefly's...
Firefly Media Server multiple security vulnerabilities
Directory traversal, authentication bypass. DoS...
Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others...
Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699
Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...
Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities
Exploit for unknown platform in category remote exploits ========================================================================= Firefly Media Server mt-daapd 2.4.1 / SVN 1699 Multiple Vulnerabilities ========================================================================= Luigi Auriemma...
firefly media server (mt-daapd) 2.4.1 svn 1699 - Multiple Vulnerabilities
firefly media server mt-daapd 2.4.1 svn 1699 - Multiple Vulnerabilities Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B...
firefly media server (mt-daapd) 2.4.1 / svn 1699 - Multiple Vulnerabilities
Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...