CVE-2012-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large...

CVE-2012-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...

PT-2012-5003

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a...

CVE-2012-3796: Exposure of Sensitive Information to an Unauthorized Actor

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode...

CVE-2012-3793: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer...

CVE-2012-3792: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service out-of-bounds read operation via a crafted packet that triggers a certain Find Node check attempt...

CVE-2012-3797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified...

PT-2012-5007

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue is related to improper checking of packet sizes before reusing packet memory buffers. This allows remote attackers...

PT-2012-5004

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an unhandled exception and daemon crash. This i...

PT-2012-5006

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to obtain sensitive information from daemon memory by sending a crafted packet with a...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A "Find Node" invalid memory access B memset integer overflow C...

Pro-Face Pro-Server EX Vulnerabilities

Overview This advisory is a follow-up to the alert titled “ICS-ALERT-12-137-01 Pro-face Pro-Server EX Vulnerabilities,” that was published May 16, 2012, on the ICS-CERT Web page. Independent researcher Luigi Auriemma identified multiple vulnerabilities in the Pro-face Pro-Server EX application an...

WinTFTP Server Pro 3.1 - Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,tftp Transfers files to and from a remote computer running the TFTP service. TFTP -i host GET | PUT source destination -i Specifies binary image transfer mode also called octet. In binary image mode the file is moved...

IT-Grundschutz M4.097: Ein Dienst pro Server (Windows)

IT-Grundschutz M4.097: Ein Dienst pro Server Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94212 Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 1...

WFTPD Pro Server 3.30.0.1 Denial Of Service

/\ Title: WFTPD Pro Server 3.30.0.1 pre auth Multiple Remote Denial of Service Vulnerabilities Summary: Professional FTP server for Windows NT / 2000 / XP / 2003 Desc: WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are...

WFTPD Pro Server 3.30.0.1 (pre auth) Multiple Remote Denial of Service Vulnerabilities

Summary Professional FTP server for Windows NT / 2000 / XP / 2003. Description WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are vulnerable including: LIST, MLST, NLST, NLST -al, STAT and maybe more. This issue is...

Quick FTP Pro 2.1 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit by Mati "muts" Aharoni. Module Options msf use exploit/windows/tftp/quick/tftppromode msf...

CVE-2007-0311: Undefined Security Weakness

Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service application crash via a long SITE ADMIN command...

CVE-2007-0311

Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service application crash via a long SITE ADMIN command...