97 matches found
CVE-2023-47250
CVE-2023-47250 affects mprivacy-tools prior to 2.0.406g (m-privacy TightGate-Pro Server). The root cause is broken access control on X11 server sockets, enabling an authenticated attacker with access to a VNC session to specify another user’s DISPLAY ID and access that user’s X11 desktop. This gr...
CVE-2023-47251
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers with access to a VNC session to automatically transfer malicious PDF documents by moving them into the .spool directory, and then...
CVE-2023-47251: Improper Limitation of a Pathname to a Restricted Directory
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers with access to a VNC session to automatically transfer malicious PDF documents by moving them into the .spool directory, and then...
m-privacy TightGate-Pro Server Security Vulnerability
The m-privacy TightGate-Pro Server is a remote control browser system from the German company m-privacy. A security vulnerability exists in m-privacy TightGate-Pro Server versions prior to 2.0.406g, which originated from a vulnerability that allows an authenticated attacker to automatically...
CVE-2023-47250: Incorrect Default Permissions
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attackers with access to a VNC session to access the X11 desktops of other users by specifying their DISPLAY ID. This allows complete control of their desktop,...
Pro-face Pro-Server EX WinGP PC Runtime Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A Find Node invalid memory access ...
WinTFTP Server Pro 3.1 - Remote Directory Traversal Vulnerability (0day)
No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...
WFTPD Server <= 3.21 Remote Buffer Overflow Exploit
No description provided by source. / WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial latest...
CVE-2012-3795
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...
CVE-2012-3792
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service out-of-bounds read operation via a crafted packet that triggers a certain Find Node check attempt...
Integer overflow
Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer...
CVE-2012-3797
CVE-2012-3797 affects Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier. The root cause is improper validation of packet sizes before reusing packet memory buffers, enabling a remote attacker to cause a denial of service via heap memory ...
CVE-2012-3796
Pro-face WinGP PC Runtime 3.1.00 and earlier and Pro-face Pro-Server EX 1.30.000 and earlier are affected by CVE-2012-3796, which allows remote attackers to obtain sensitive information from daemon memory by sending a crafted packet with a specific opcode. The issue is described as an information...
CVE-2012-3795
CVE-2012-3795 affects Pro-face WinGP PC Runtime ≤3.1.00 and Pro-face Pro-Server EX ≤1.30.00 (ProServr.exe). A crafted network packet with a specific opcode and an oversized size field can trigger an out-of-bounds/write condition, causing a remote denial of service (daemon crash). Public details d...
CVE-2012-3795
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...
CVE-2012-3796
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode...
CVE-2012-3793
CVE-2012-3793 affects Pro-face WinGP PC Runtime (3.1.00 and earlier) and Pro-face Pro-Server EX (1.30.000 and earlier). The vulnerability stems from an integer overflow that can cause a buffer overflow when processing a crafted packet with a specific opcode, leading to a denial-of-service (daemon...
CVE-2012-3792
The vulnerability CVE-2012-3792 affects Pro-face WinGP PC Runtime <= 3.1.00 and Pro-face Pro-Server EX
CVE-2012-3793: Improper Restriction of Operations within the Bounds of a Memory Buffer
Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer...
CVE-2012-3792: Improper Restriction of Operations within the Bounds of a Memory Buffer
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service out-of-bounds read operation via a crafted packet that triggers a certain Find Node check attempt...