CVE-2022-30696

The CVE-2022-30696 issue affects Acronis Snap Deploy on Windows prior to build 3640. It is a DLL hijacking vulnerability that occurs when a process loads a DLL without specifying the absolute path, enabling local privilege escalation. The vulnerability is documented across multiple sources and is...

CVE-2022-30695 Local privilege escalation due to excessive permissions assigned to child processes

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deploy Windows before build 3640...

CVE-2022-30695

CVE-2022-30695 affects Acronis Snap Deploy for Windows. The vulnerability arises from excessive privileges granted to child processes, enabling local privilege escalation. Affected product: Acronis Snap Deploy (Windows) before build 3640. Root cause: overly permissive privileges assigned to child...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is an Acronis platform for bulk deployment of system images. Acronis Snap Deploy is vulnerable to a DLL hijacking vulnerability, which originates when a process attempts to load a DLL without specifying the absolute path to the DLL, and can be exploited by an attacker to cause...

Acronis Snap Deploy 安全漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis. Acronis Snap Deploy is vulnerable to an elevation of privilege vulnerability that could be exploited by an attacker to cause a local elevation of privilege...

Acronis Snap Deploy 安全漏洞

Acronis Snap Deploy, an Acronis platform for bulk deployment of system images, is vulnerable to an elevation of privilege vulnerability that stems from assigning too many privileges to child processes, which could be exploited by an attacker to cause a local elevation of privilege...

CVE-2022-30696

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3640...

CVE-2022-30695

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deploy Windows before build 3640...

CVE-2022-30697

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 3640...

Directory traversal

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

CVE-2008-1410

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

Null pointer dereference

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

CVE-2008-1411

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

CVE-2008-1411

The CVE-2008-1411 entry affects the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier. The issue is a denial of service (crash) caused by an incomplete TFTP request that triggers a NULL pointer dereference in the PXE server. This is the explicit vulnerability described in the ...

CVE-2008-1410

CVE-2008-1410 affects Acronis Snap Deploy 2.0.0.1076 and earlier, where the PXE Server (pxesrv.exe) is vulnerable to directory traversal via the TFTP service. This allows remote attackers to read arbitrary files from the affected system. The vulnerability is documented with a CVSSv2 base score of...

CVE-2008-1411

The PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service crash via an incomplete TFTP request, which triggers a NULL pointer dereference...

CVE-2008-1410

Directory traversal vulnerability in the PXE Server pxesrv.exe in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service...

Acronis Snap Deploy PXE Server TFTP目录遍历和拒绝服务漏洞

BUGTRAQ ID: 28182 CNCAN ID:CNCAN-2008031101 Acronis PXE Server是一款Acronis Snap Deploy服务器的组建，用于配置管理。 Acronis PXE Server不正确处理用户提交的请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务或目录遍历攻击。 PXE Server pxesrv.exe实现的TFTP服务器目录"../"字符缺少过滤，可导致目录遍历问题，以应用程序权限查看系统文件内容。 不完全的TFTP请求可导致NULL指针访问而使系统崩溃。 Acronis Snap Deploy 2.0.0.1076...

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author...

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...