2533 matches found
CVE-2004-2432: Undefined Security Weakness
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...
Multiple HP Ignite-UX deployment tool vulnerabilities
/etc/passwd copy is available via TFTP, TFTP filesystem is world writable...
Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue
-- Corsaire Security Advisory -- Title: HP Ignite-UX filesystem permissions issue Date: 23.11.04 Application: HP Ignite-UX prior to version C.6.2.241 Environment: HP-UX Author: Martin O'Neal [email protected] Audience: General distribution Reference: c041123-002 -- Scope -- The aim of thi...
Futuresoft TFTP Server multiple vulnerabilities
Directory traversal, buffer overflow...
CVE-2002-1968
The CVE-2002-1968 entry describes a vulnerability in Com21 DOXport 1100 series cable modems (firmware 2.1.1.106 and possibly earlier than 2.1.1.108.003). The issue: a device may download a DOCSIS configuration file from a malicious TFTP server on the internal network, enabling local users to modi...
CVE-2002-1968
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server...
CVE-2002-1810
D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information...
CVE-2002-1810
CVE-2002-1810 - Affected product: D-Link DWL-900AP+ Access Point, versions 2.1 through 2.2. Vulnerability: Remote attackers can access the TFTP server without authentication and read the config.img file. Impact: config.img contains sensitive information such as the administrative password, WEP en...
CVE-2002-1810: Missing Authentication for Critical Function
D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information...
CVE-2002-1968: Undefined Security Weakness
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server...
CVE-2001-1484
Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol TFTP to modify firmware and configuration via a bounce attack from a system on the local area network LAN side, which is allowed to access TFTP without authentication...
CVE-2001-1484
CVE-2001-1484 concerns Alcatel ADSL modems where the TFTP service can be accessed without authentication. A remote attacker on the LAN can use a bounce attack to modify firmware and configuration, implying network-based access with low complexity and potential partial impacts to confidentiality, ...
CVE-2001-1484: Undefined Security Weakness
Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol TFTP to modify firmware and configuration via a bounce attack from a system on the local area network LAN side, which is allowed to access TFTP without authentication...
TFTPD 2000 TFTP Server DoS
No description provided...
tftp 2000 1.0.0.1
Another tftpd 2000 1.0.0.1 vulnerbility exists in that if you run hping -2 xxx.xxx.xxx.xxx -p 69 The third packet crashes the tftp daemon on server xxx.xxx.xxx.xxx This was tested on WinXP service pack 1 -- - Josh...
FutureSoft TFTP Server 2000 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================ FutureSoft TFTP Server 2000 Remote Denial of Service Exploit ============================================================ / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit...
FutureSoft TFTP Server 2000 - Remote Denial of Service
FutureSoft TFTP Server 2000 - Remote Denial of Service / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail:...
FutureSoft TFTP Server 2000 Remote Denial of Service Exploit
No description provided by source. / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected]...
FutureSoft TFTP Server 2000 - Remote Denial of Service
/ FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan Usage:tftpexp targetPo...
CVE-2005-1813
The CVE-2005-1813 entry describes a directory traversal flaw in FutureSoft TFTP Server Evaluation Version 1.0.0.1. A remote attacker can read arbitrary files by sending a TFTP GET request containing ../ or ..\ sequences, exploiting improper path handling in the server. The available connected doc...