893 matches found
ProSysInfo TFTPDWIN远程栈溢出漏洞
TFTPDWIN是Windows平台下的一款多线程的TFTP协议服务器。 TFTPDWIN在处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 TFTPDWIN的tftpd.exe在处理请求的资源时存在栈溢出漏洞。如果用户使用超长名称（大于280字节）请求了资源的话，就会触发这个漏洞，导致执行任意指令。 ProSysInfo TFTPDWIN 0.4.2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.prosysinfo.com.pl/tftpserver/...
CVE-2006-4948
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party...
CVE-2006-4948
CVE-2006-4948 affects ProSysInfo TFTPDWIN 0.4.2 and earlier. A stack-based buffer overflow in tftpd.exe can be triggered by a long filename sent to the TFTP server, allowing remote attackers to cause arbitrary code execution or a denial of service. Public references show a long filename vulnerabi...
CVE-2006-4948
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party...
CVE-2006-4948: Undefined Security Weakness
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party...
[SA21854] TFTP Server TFTPDWIN Buffer Overflow Vulnerability
TITLE: TFTP Server TFTPDWIN Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA21854 VERIFY ADVISORY: http://secunia.com/advisories/21854/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network SOFTWARE: TFTP Server TFTPDWIN 0.x http://secunia.com/product/11921/...
TFTPDWIN TFTP server buffer overflow
Buffer overflow on oversized requested resource filename...
CVE-2006-4781
Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...
CVE-2006-4781
Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...
CVE-2006-4781
CVE-2006-4781 describes a heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1. A crafted UDP packet sent to port 69 allows a remote attacker to cause a crash (DoS) or possibly run arbitrary code during absolute-path-name construction. The description notes that some detail...
CVE-2006-4781: Undefined Security Weakness
Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...
Multi-Threaded TFTP 1.1 - GET Denial of Service
Multi-Threaded TFTP 1.1 - GET Denial of Service !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Multithreaded TFTP And any-one else i forgot ^ ^. \DEBUG INF0// First chance exceptions are reported before any exception handling. This exception may be expected and handled...
CVE-2006-3288
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System WCS for Linux and Windows before 3.251, when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors...
CVE-2006-3288: Undefined Security Weakness
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System WCS for Linux and Windows before 3.251, when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors...
[SA19844] WinAgents TFTP Server Directory Traversal Vulnerability
TITLE: WinAgents TFTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19844 VERIFY ADVISORY: http://secunia.com/advisories/19844/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: WinAgents TFTP Server 3.x...
Directory traversal
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...
Directory traversal
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...