Directory traversal

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname...

Code injection

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service daemon hang by uploading a file named 1 '|' pipe, 2 '"' quotation mark, or 3 "" less than, greater than; or 4 a file with a long name. NOTE: the issue for vector 4 might...

Code injection

Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service daemon crash via a long TFTP packet, a different vulnerability than CVE-2008-1311...

CVE-2008-1311

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service daemon hang by uploading a file named 1 '|' pipe, 2 '"' quotation mark, or 3 "" less than, greater than; or 4 a file with a long name. NOTE: the issue for vector 4 might...

CVE-2008-1312

Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service daemon crash via a long TFTP packet, a different vulnerability than CVE-2008-1311...

CVE-2008-1312

The vulnerability CVE-2008-1312 affects PacketTrap pt360 Tool Suite’s TFTP server prior to version 2.0.3900.0 (and 1.1.33.1.0). Remote attackers can trigger a denial-of-service (daemon crash) by sending a long TFTP packet. Public details describe affected versions; remediation in the public docs ...

CVE-2008-1311

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service daemon hang by uploading a file named 1 '|' pipe, 2 '"' quotation mark, or 3 "" less than, greater than; or 4 a file with a long name. NOTE: the issue for vector 4 might...

CVE-2008-1310

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname...

CVE-2008-1310

PacketTrap Networks pt360 Tool Suite includes a TFTP server component affected by a directory traversal vulnerability. The CVE-2008-1310 entry applies to pt360 Tool Suite 1.1.33.1.0 and other versions before 2.0.3900.0, where an attacker can read and overwrite arbitrary files via directory traver...

CVE-2008-1312

Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service daemon crash via a long TFTP packet, a different vulnerability than CVE-2008-1311...

CVE-2008-1311

CVE-2008-1311 affects PacketTrap pt360 Tool Suite POS/PRO TFTP server. The vulnerability in the TFTP service allows remote denial of service (daemon hang) by uploading specially named files: a pipe (|), a quote (") or angle-bracket (,) or by using an excessively long filename. Related details sho...

Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076

Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Denial of Service in PacketTrap TFTP server 2.0.3901.0

Luigi Auriemma Application: pt360 Tool Suite PRO http://www.packettrap.com/product/index.aspx Versions: = 2.0.3901.0 Platforms: Windows Bug: Denial of Service of the TFTP server Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...

Acronis PXE Server multiple security vulnerabilities

TFTP server directory traversal and NULL pointer dereference...

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer

acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author...

Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns

Exploit for unknown platform in category remote exploits ====================================================================== Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns ====================================================================== Luigi Auriemma Application:...

DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability

Title ----- DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Severity -------- Medium Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

CVE-2002-2237

tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux...

CVE-2002-2237

CVE-2002-2237 affects TFTPD32 TFTP server 2.21 and earlier, allowing remote denial of service via a GET request containing a DOS device name (e.g., com1/aux). The CERT advisory associates this with Wyse TFTPD32 in Wyse Simple Imager (WSI) and lists a fixed version path: 2.51 for this CVE, with WS...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

This module exploits a stack buffer overflow in AT-TFTP v1.9, by sending a request get/write for an overly long file name. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Allied Telesyn TFTP...