Unspecified Vulnerability in Mozilla Rust (CNVD-2021-30438)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability in prost crate in Mozilla Rust versions prior to 0.6.1, which stems from stack consumption via crafted messages, can be exploited by an attacker to cause a denial of service or remote co...

CVE-2020-35858

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

CVE-2020-35858

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

Remote code execution

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

CVE-2020-35858

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

CVE-2020-35858

The CVE-2020-35858 issue affects the prost crate for Rust prior to 0.6.1, where decoding a crafted message can cause stack consumption leading to denial of service (notably on x86) and potentially remote code execution (e.g., on ARM). The root cause is a stack-related flaw in parsing untrusted in...

CVE-2020-35858

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

CVE-2020-35858: Out-of-bounds Write

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability in prost crate in Mozilla Rust versions prior to 0.6.1, which stems from stack consumption via crafted messages, can be exploited by an attacker to cause a denial of service or remote co...

actix-protobuf (>=0.4.0, <=0.4.1), arc-cli (0.1.0) +106 more potentially affected by CVE-2020-35858 via prost (>=0.1.0, <=0.5.0)

prost CARGO version =0.1.0, =0.4.0, =0.8.0, =0.8.0, =0.8.0, =0.1.0, =0.1.0-alpha, =0.1.0, =0.1.0, =0.8.0, =0.1.0-alpha.1, =0.1.0-alpha.2 and more Source cves: CVE-2020-35858 Source advisory: OSV:RUSTSEC-2020-0002...

PT-2020-17490

Name of the Vulnerable Software and Affected Versions prost crate versions prior to 0.6.1 Description The issue is related to stack consumption via a crafted message, potentially causing a denial of service or possibly remote code execution, depending on the architecture. Decoding untrusted input...

Airspan ProST WiMAX Device Web Interface Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28122/info Airspan ProST WiMAX device is prone to an authentication-bypass vulnerability because it fails to perform adequate authentication checks in the web interface. An attacker can exploit this issue to gain...

Design/Logic Flaw

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

CVE-2008-1543

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

CVE-2008-1543

CVE-2008-1543 concerns the Airspan WiMAX ProST system. The affected component is the ProST Web Management interface, specifically the Advanced User Interface Pages, which use a default User ID and password. This configuration flaw can let remote attackers obtain partial administrative access, as ...

CVE-2008-1543

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

CVE-2008-1543: Undefined Security Weakness

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

airspan-bypass.txt

Topic: Airspan ProST Modem Management Authentication Bypass Vulnerability Announced: 2008-03-13 Product: Airspan ProST Antenna Vendor: http://www.airspan.com/ Impact: Remote shell access Affected product: Airspan ProST with firmware 6.5.40.0, Hardware rev 4.1 Credits: Francis Lacoste-Cordeau I...

Authentication flaw

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

CVE-2008-1262

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...