Secure Auditor 3.0 - Directory Traversal

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt + ISR: ApparitionSec Vendor: ==================== www.secure-bytes.com Product: ===================== Secure Auditor - v3.0 Secure...

Kiwi CatTools TFTP目录遍历漏洞

Kiwi CatTools是一个管理网络设备如路由器、交换机与防火墙的工具。 CatTools TFTP服务器处理请求时存在输入验证漏洞，远程攻击者可能利用此漏洞遍历服务器目录访问任意文件。 CatTools TFTP服务器没有正确检查请求文件路径中的目录遍历串，允许远程攻击者通过特制的目录遍历序列向TFTP根目录以外的任意位置上传或下载任意文件。 Kiwi CatTools 3.2.0 beta 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kiwisyslog.com/cattools-info.php tftp -i 10.11.12.1...

cattools-traverse.txt

TFTP directory traversal in Kiwi CatTools Application : Kiwi CatTools prior to 3.2.0 beta Release Date : 8 February 2007 Author : Nicob Product : ========= http://www.kiwisyslog.com/cattools-info.php : "Kiwi CatTools is a freeware application that provides automated device configuration managemen...

TFTP directory traversal in Kiwi CatTools

TFTP directory traversal in Kiwi CatTools Application : Kiwi CatTools prior to 3.2.0 beta Release Date : 8 February 2007 Author : Nicob nicob at nicob.net Product : ========= http://www.kiwisyslog.com/cattools-info.php : "Kiwi CatTools is a freeware application that provides automated device...