84 matches found
CVE-2006-0946: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page...
CVE-2006-0947: Undefined Security Weakness
Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due...
Thomson SpeedTouch 500 modems vulnerable to XSS
TITLE: Thomson SpeedTouch 500 series vulnerable to XSS CRITICAL: Less critical IMPACT: Cross Site Scripting SOFTWARE: SpeedTouch 5.3.2.6.0 DESCRIPTION: There consists a vulnerability in the SpeedTouch modems, which can be exploited by malicious people to conduct cross-site scripting attacks, and...
Thomson SpeedTouch ADSL modems crossite scripting
No description provided...
Thomson SpeedTouch 500 Series - NewUser Function 31 Variable Persistent User Creation
Thomson SpeedTouch 500 Series - NewUser Function 31 Variable Persistent User Creation source: https://www.securityfocus.com/bid/16839/info The SpeedTouch 500 series are prone to a cross-site scripting vulnerability. This issue is due to a failure in the devices to properly sanitize user-supplied...
Thomson SpeedTouch 500 Series - LocalNetwork Page 'name' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16839/info The SpeedTouch 500 series are prone to a cross-site scripting vulnerability. This issue is due to a failure in the devices to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...
Thomson SpeedTouch 500 Series - NewUser Function 31 Variable Persistent User Creation
source: https://www.securityfocus.com/bid/16839/info The SpeedTouch 500 series are prone to a cross-site scripting vulnerability. This issue is due to a failure in the devices to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...
Thomson SpeedTouch 500 Series - LocalNetwork Page name Cross-Site Scripting
Thomson SpeedTouch 500 Series - LocalNetwork Page name Cross-Site Scripting source: https://www.securityfocus.com/bid/16839/info The SpeedTouch 500 series are prone to a cross-site scripting vulnerability. This issue is due to a failure in the devices to properly sanitize user-supplied input. An...
CVE-2004-0641
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2004-0641
The CVE-2004-0641 issue affects Thomson SpeedTouch 510 ADSL Router (firmware GV8BAA3.270, and possibly earlier). The vulnerability arises from a predictable TCP Initial Sequence Number (ISN) generator, enabling remote attackers to spoof or hijack TCP connections. Exploitation details are describe...
CVE-2004-0641: Undefined Security Weakness
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2004-0834
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via 1 modemrun, 2 pppoa2, or 3 pppoa3...
CVE-2004-0834
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via 1 modemrun, 2 pppoa2, or 3 pppoa3...
Mandrake Linux Security Advisory : speedtouch (MDKSA-2004:130)
The Speedtouch USB driver contains a number of format string vulnerabilities due to improperly made syslog system calls. These vulnerabilities can be abused by a local user to potentially allow the execution of arbitrary code with elevated privileges. The updated packages have been patched to...
[ GLSA 200411-04 ] Speedtouch USB driver: Privilege escalation vulnerability
Gentoo Linux Security Advisory GLSA 200411-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Speedtouch USB driver for linux format string bugs
Format string bug on syslog call...
Speedtouch USB driver: Privilege escalation vulnerability
Background The speedtouch package contains a driver for the ADSL SpeedTouch USB modem. Description The Speedtouch USB driver contains multiple format string vulnerabilities in modemrun, pppoa2 and pppoa3. This flaw is due to an improperly made syslog system call. Impact A malicious local user cou...
GLSA-200411-04 : Speedtouch USB driver: Privilege escalation vulnerability
The remote host is affected by the vulnerability described in GLSA-200411-04 Speedtouch USB driver: Privilege escalation vulnerability The Speedtouch USB driver contains multiple format string vulnerabilities in modemrun, pppoa2 and pppoa3. This flaw is due to an improperly made syslog system cal...
CVE-2004-0834
CVE-2004-0834 describes a local;format-string vulnerability in the Speedtouch USB driver prior to version 1.3.1. The flaw affects the driver’s logging calls in modem_run, pppoa2 and pppoa3, allowing a malicious local user to potentially execute arbitrary code with elevated privileges. Affected pr...