799 matches found
CVE-2005-1812
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long 1 filename or 2 transfer mode string in a Read Request RRQ or Write Request WRQ packet...
CVE-2005-1813
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing 1 "../" dot dot slash or 2 ".." dot dot backslash sequences...
CVE-2005-1813
The CVE-2005-1813 entry describes a directory traversal flaw in FutureSoft TFTP Server Evaluation Version 1.0.0.1. A remote attacker can read arbitrary files by sending a TFTP GET request containing ../ or ..\ sequences, exploiting improper path handling in the server. The available connected doc...
CVE-2005-1813
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing 1 "../" dot dot slash or 2 ".." dot dot backslash sequences...
CVE-2005-1812
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long 1 filename or 2 transfer mode string in a Read Request RRQ or Write Request WRQ packet...
CVE-2005-1812
CVE-2005-1812 affects FutureSoft TFTP Server Evaluation Version 1.0.0.1, with multiple stack-based buffer overflows triggered by overly long filename or transfer mode fields in RRQ/WRQ requests. The vulnerability enables remote code execution and has a documented in-the-wild footprint via public ...
[SA15539] FutureSoft TFTP Server 2000 Directory Traversal and Buffer Overflows
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2001-1426
Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...
Cisco IOS Device TFTP Certificate Authority (CA) File Detection
The remote host has a TFTP server installed that is serving one or more Cisco IOS Certificate Authority CA files. These files may include the private key for the CA, which is information that should be considered sensitive. This NASL script was written by Martin O'Neal of Corsaire...
Cisco ONS Multiple Remote Vulnerabilities (20040219-ONS)
According to its version number, the remote Cisco ONS platform has the following vulnerabilities : - The TFTP server allows unauthenticated access to TFTP GET and PUT commands. An attacker may exploit this flaw to upload or retrieve the system files of the remote ONS platform. - A denial of servi...
CVE-2004-2432
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...
CVE-2004-0951
The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...
CVE-2004-0952
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...
Asante FM2008 10/100 Ethernet switch backdoor login
The Asante FM2008 is an 8 port managed Ethernet 10/100 switch. It may be managed, like many others in its device class, by Telnet, by serial port, by HTTP, or by SNMP. Also like most similar devices, the serial port, HTTP, and Telnet access methods require one to provide username/password...
3cdaemon tftp server DOS vulnerability
AUTHOR: Fortinet, inc Ning Wangnwangatscncomcn DATE: 15/12/2004 PRODUCTS: 3cdaemon version 2.0 revision 10 Description: 3com product 3cdaemon is one of the most popular used tools to achieve files backup and upgrade. Detail: 3com tftp daemon exist a vulnerability, which will encounter a fatal err...
cccitftp-adv.txt
Luigi Auriemma Application: Chesapeake TFTP Server http://www.netcordia.com/tools/tools/TrivialFTP/tftp.html Versions: 1.0 Platforms: any supported by Java Bugs: A directory traversal B Denial of Service Exploitation: remote Date: 30 October 2004 Author: Luigi Auriemma e-mail: [email protected]...
Chesapeake TFTP Server 1.0 Directory Traversal and DoS PoC Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include sys/stat.h / Showdump 0.1 Copyright 2004 Luigi Auriemma This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...
Chesapeake TFTP Server 1.0 - Directory Traversal Denial of Service (PoC)
Chesapeake TFTP Server 1.0 - Directory Traversal Denial of Service PoC / by Luigi Auriemma / include include include include / Showdump 0.1 Copyright 2004 Luigi Auriemma This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...