CVE-2007-3748

CVE-2007-3748 describes a buffer overflow in the UPnP IGD code used by iChat on macOS X 10.3.9 and 10.4.10. The issue allows network-adjacent remote attackers to execute arbitrary code by sending a crafted packet, per the connected documents. Affected component: UPnP IGD implementation in iChat. ...

CVE-2007-3748

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3744

Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3748: Undefined Security Weakness

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3744: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

Apple Mac OS X mDNSResponder buffer overflow vulnerability

Overview Apple Mac OS X mDNSresponder contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description mDNS uses IP multicast with DNS to provide the functionality of a DNS server for service discovery in networks that do not have a DNS server...

Buffer overflow

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2390

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

Buffer overflow

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2386

CVE-2007-2386 describes a buffer overflow in Apple’s mDNSResponder for macOS X (affected 10.4 up to 10.4.9) triggered by crafted UPnP IGD packets, enabling remote code execution or denial of service. Public documentation confirms the issue arises from mDNSResponder processing UPnP IGD data and no...

CVE-2007-2390

The CVE-2007-2390 issue is a buffer overflow in Apple Mac OS X iChat’s UPnP IGD handling. Specifically, processing crafted UPnP Internet Gateway Device packets could allow a remote attacker to cause a denial of service or execute arbitrary code. Affected versions are Mac OS X 10.3.9 and 10.4.9. R...

CVE-2007-2390: Undefined Security Weakness

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

AVM IGD CTRL Service directory traversal

HTTP directory traversal with TCP/49001 UPNP port...

avm-traversal.txt

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

Directory traversal

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

CVE-2007-0357 is a directory traversal vulnerability in the AVM IGD CTRL Service of Fritz!DSL 02.02.29. The issue allows remote attackers to read arbitrary files via URL-encoded dot-dot backslash sequences (..%5C) in a URI requested from the AR7 webserver. Affected component is the AVM IGD CTRL S...

CVE-2007-0357: Undefined Security Weakness

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to retrieve t...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-suppli...