4387 matches found
security flaw
Multiple unknown vulnerabilities in the 1 AIM, 2 LDAP, 3 FibreChannel, 4 GSMMAP, 5 SRVLOC, and 6 NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash...
Software602 602Pro LAN SUITE < 2004.0.05.0509 Directory Traversal Arbitrary File Access
Binary data 2883.prm...
software602 602 lan suite 2004 - Directory Traversal
software602 602 lan suite 2004 - Directory Traversal source: https://www.securityfocus.com/bid/13519/info 602 LAN Suite 2004 is reported prone to a directory traversal vulnerability. It is reported that an attacker can exploit this issue to detect the presence of files on a computer and potential...
CVE-2005-0328
Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MA...
CVE-2001-1451: Undefined Security Weakness
Memory leak in the SNMP LAN Manager LANMAN MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service memory consumption via a large number of GET or GETNEXT requests...
USN-86-1: cURL vulnerability
infamous41md discovered a buffer overflow in cURL's NT LAN Manager NTLM authentication handling. By sending a specially crafted long NTLM reply packet, a remote attacker could overflow the reply buffer. This could lead to execution of arbitrary attacker specified code with the privileges of the...
Gigafast/CompUSA router (model EE400-R) vulnerabilities
This router is/was widely sold in CompUSA stores. It is a Gigafast router, re-branded as a CompUSA router. All firmware versions are affected. When reported to the manufacturer on 5/13/04, I had received a response stating that the information would be passed on to firmware developer. Almost a ye...
CVE-2005-0494
The CVE-2005-0494 entry concerns Thomson TCW690 cable modem firmware 2.1 and software ST42.03.0a. The RgSecurity form in the HTTP server fails to properly validate the password before making changes, enabling remote attackers on the LAN to gain access through a direct POST request. The vulnerabil...
CVE-2005-0494: Undefined Security Weakness
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request...
CVE-2004-1501
The CVE-2004-1501 entry concerns the webmail service in Lan Suite 602, versions up to 2004.0.04.0909 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value and then disconnecting ...
CVE-2004-1502
CVE-2004-1502 refers to the Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier. The issue allows remote attackers to cause a denial of service (socket exhaustion) by sending a Telnet request to an IP address of the proxy’s network interface, which triggers a loop. The available sources do n...
CVE-2004-1501: Undefined Security Weakness
The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service CPU and memory consumption by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data...
CVE-2004-1502: Undefined Security Weakness
The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service socket exhaustion via a Telnet request to an IP address of the proxy's network interface, which causes a loop...
security flaw
The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...
CVE-2005-0328
Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MA...
squid -- denial-of-service vulnerabilities
The Squid team reported several denial-of-service vulnerabilities related to the handling of DNS responses and NT Lan Manager messages. These may allow an attacker to crash the Squid cache...
CVE-2004-2549
Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...
curl -- authentication buffer overflow vulnerability
Two iDEFENSE Security Advisories reports: An exploitable stack-based buffer overflow condition exists when using NT Lan Manager NTLM authentication. The problem specifically exists within Curlinputntlm defined in lib/httpntlm.c. Successful exploitation allows remote attackers to execute arbitrary...
CVE-2004-0335
LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...
CVE-2004-0337
Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...