Acronis Snap Deploy PXE Server TFTP目录遍历和拒绝服务漏洞

BUGTRAQ ID: 28182 CNCAN ID:CNCAN-2008031101 Acronis PXE Server是一款Acronis Snap Deploy服务器的组建，用于配置管理。 Acronis PXE Server不正确处理用户提交的请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务或目录遍历攻击。 PXE Server pxesrv.exe实现的TFTP服务器目录"../"字符缺少过滤，可导致目录遍历问题，以应用程序权限查看系统文件内容。 不完全的TFTP请求可导致NULL指针访问而使系统崩溃。 Acronis Snap Deploy 2.0.0.1076...

Acronis PXE Server multiple security vulnerabilities

TFTP server directory traversal and NULL pointer dereference...

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author...

Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns

Exploit for unknown platform in category remote exploits ====================================================================== Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns ====================================================================== Luigi Auriemma Application:...

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Directory traversal

Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component pxemtftp.exe in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2007-3874

The CVE-2007-3874 issue affects Symantec Altiris Deployment Solution 6.x PXE server’s tftp/mtftp daemon (pxemtftp.exe). A directory traversal vulnerability in the PXE server component could allow unauthenticated remote attackers to read arbitrary files on the Altiris server. Impact is read access...

Symantec Altiris Deployment Solution目录遍历漏洞

BUGTRAQ ID: 26266 CVECAN ID: CVE-2007-3874 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec的Altiris Deployment Solution产品的可选PXE服务器组件中包含有tftp/mtftp服务程序，该服务程序中存在目录遍历漏洞。 如果用户提交了恶意请求的话，就可能允许未经认证的攻击者以SYSTEM权限下载系统上的任意文件。 Symantec Altiris Deployment Solution 6.x SP2...

CVE-2002-0835

Preboot eXecution Environment PXE server allows remote attackers to cause a denial of service crash via certain DHCP packets from Voice-Over-IP VOIP phones...

CVE-2002-0835

The CVE-2002-0835 issue affects the PXE (Preboot eXecution Environment) server component used on Linux-like systems (e.g., Red Hat Advanced Server) and SCO OpenLinux. Description across connected sources states that the PXE server can be crashed, causing a denial of service, when processing certa...

RHEL 2.1 : pxe (RHSA-2002:165)

Updated PXE packages are now available for Red Hat Linux Advanced Server which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PX...

Intel PXE Server Remote Overflow

The remote host is running PXE Preboot eXecution Environment, a service which can be used to boot diskless clients. There is a flaw in the remote PXE which may allow an attacker to gain a root shell on this host. Nessus disabled this service to perform this security check C Tenable Network...

PXE server DoS

Corrupted DHCP packet crashes the server...

Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Preboot eXecution Environment PXE server denial-of-service attacks Advisory number: CSSA-2002-044.0 Issue date: 2002 November 11 Cross...

Important: Red Hat Security Advisory: : PXE server crashes from certain DHCP packets

Updated PXE packages are now available for Red Hat Linux which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PXE server. It was...