213 matches found
Directory traversal
Directory traversal vulnerability in the PXE TFTP Service PXEMTFTP.exe in LANDesk Management Suite LDMS 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643...
CVE-2008-6195
CVE-2008-6195: A directory traversal in LANDesk Management Suite (LDMS) PXE TFTP Service (PXEMTFTP.exe) allows remote attackers to read arbitrary files via a subdirectory name followed by .. sequences. Affected product is LDMS 8.80.1.1 and earlier. The issue targets the PXE TFTP Service and resul...
CVE-2008-6195
Directory traversal vulnerability in the PXE TFTP Service PXEMTFTP.exe in LANDesk Management Suite LDMS 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643...
Fedora Update for cobbler FEDORA-2008-9723
Check for the Version of cobbler OpenVAS Vulnerability Test Fedora Update for cobbler FEDORA-2008-9723 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for cobbler FEDORA-2008-9745
Check for the Version of cobbler OpenVAS Vulnerability Test Fedora Update for cobbler FEDORA-2008-9745 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for cobbler FEDORA-2008-10000
Check for the Version of cobbler OpenVAS Vulnerability Test Fedora Update for cobbler FEDORA-2008-10000 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fujitsu Systemcast Wizard Lite PXE请求远程溢出漏洞
BUGTRAQ ID: 33342 Systemcast Wizard Lite是用于创建富士通PRIMEQUEST服务器系统的支持软件。 Systemcast Wizard Lite的PXEService服务监听PXE协议请求。入站报文被拷贝到了0x400字节的固定缓冲区，但传送给recvfrom的参数长度为0x5DC，因此如果远程攻击者发送了超过0x400字节的特制upd报文的话，就可以触发溢出，导致执行任意指令。 Fujitsu Systemcast Wizard Lite = 2.0 Fujitsu ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...
FUJITSU SystemWizard Lite Multiple Vulnerabilities
FUJITSU SystemWizard Lite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Stack overflow
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet...
CVE-2009-0270
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet...
Fujitsu SystemcastWizard Lite buffer overflow
Buffer overflow on oversized PXE request...
[Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow.
Wintercore Research:: Advisory W01-0109 html version: http://www.wintercore.com/advisories/advisoryW010109.html 1. Background "SystemcastWizard Lite is support software for the setup of the PRIMEQUEST system" 2. Non-technical description PXEService.exe is prone to a remote buffer overflow due to...
Cisco Security Advisory: IronPort Encryption Appliance / PostX and PXE Encryption Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IronPort Encryption Appliance / PostX and PXE Encryption Vulnerabilities Advisory ID: cisco-sa-20090114-ironport Revision 1.0 For Public Release 2009 January 14 1600 UTC GMT...
Code injection
PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user...
CVE-2009-0053
PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to obtain the decryption key via unspecifie...
CVE-2009-0054
PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user...
CVE-2009-0053
CVE-2009-0053 describes a logic-error vulnerability in Cisco IronPort Encryption Appliance and PostX PXE Encryption that could allow remote attackers to obtain the per-message decryption key and decrypt intercepted secure e-mail messages. Affected products/versions include IronPort Encryption App...
CVE-2009-0054
CVE-2009-0054 corresponds to Cisco IronPort PXE Encryption phishing-style vulnerability. The Cisco advisory explains that PXE Encryption in IronPort Encryption Appliance and PostX (various 6.2.x, 6.3, and 6.5 lines) could allow an attacker to obtain a user’s credentials by tricking a recipient in...
[SECURITY] Fedora 10 Update: cobbler-1.2.9-1.fc10
Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...
[SECURITY] Fedora 9 Update: cobbler-1.2.9-1.fc9
Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...