CVE-2003-1264

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

Avaya Argent Office requests 'HoldMusic' file from broadcast address via TFTP

Overview This vulnerability allows unauthenticated users to upload call holding music to affected devices. Description The Avaya Argent Office sends broadcast TFTP requests to obtain a file named "HoldMusic" that is used to supply hold music for customers who dial into the device. Therefore, an...

Avaya Argent Office uses weak authentication for TFTP-based administrative control

Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...

CVE-2003-0729

Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename...

CVE-2003-0729

CVE-2003-0729 describes a buffer overflow in Tellurian TftpdNT 1.8 that can be triggered by a TFTP request with a long filename, allowing remote code execution. The vulnerability is documented across multiple sources (NVD CVE entry, CVE Record) with an impact profile indicating potential arbitrar...

CVE-2003-0729: Undefined Security Weakness

Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename...

[Full-Disclosure] Security Vulnerability in Tellurian TftpdNT (Long Filename)

Security Vulnerability in Tellurian TftpdNT Long Filename ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5RP0M1PAUM.html SUMMARY Tellurian TftpdNT http://www.tellurian.com.au/ is a TFTP server for Windows NT and...

TFTP Daemon Detection

The remote host is running a TFTP Trivial File Transfer Protocol daemon. TFTP is often used by routers and diskless hosts to retrieve their configuration. It can also be used by worms to propagate. C Tenable Network Security, Inc. Revised 19/02/05 by Martin O'Neal of Corsaire to make the detectio...

Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service

Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service source: https://www.securityfocus.com/bid/7575/info It has been reported that a problem with Verilink broadband routers exists in the handling of TFTP packets. Because of this, an attacker could potentially deny...

Verilink NetEngine 6100-4 Broadband Router - TFTP Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/7575/info It has been reported that a problem with Verilink broadband routers exists in the handling of TFTP packets. Because of this, an attacker could potentially deny service to legitimate users of the network...

CVE-2002-0813

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service reset or modify configuration via a long filename...

CVE-2002-0813

CVE-2002-0813 corresponds to a heap-based buffer overflow in the TFTP server capability of Cisco IOS 11.1/11.2/11.3. The vulnerability can be triggered by a long TFTP read filename, allowing remote attackers to cause a denial of service (reset) or modify configuration. OpenVAS/Nessus entries desc...

CVE-2002-0813: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service reset or modify configuration via a long filename...

CVE-2002-1542

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

CVE-2002-1542

The CVE refers to SolarWinds TFTP server 5.0.55 and earlier. Affected component: the TFTP server handling of UDP datagrams. Root cause: processing a large UDP datagram can cause a crash, with OpenVAS/NASL and Nessus entries describing the overflow risk. Documented impact: denial of service via se...

CVE-2002-1542

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

CVE-2002-1542: Undefined Security Weakness

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

Unauthorized Longshine AP TFTP access

TFTP access from WLAN interface allowed...

Longshine WLAN Access-Point LCS-883R VU#310201

Hardware: Longshine LCS-883R-AC-B External WLAN Access Point 22 Mbps Software: ThreadX ARM7/Green Hills Version G3.0f.3.0c from Express Logic Inc. Description: Get Superuser Privileges and view the devices password and password and other passwords Versions affected: tested with 03.01.0b and...

Longshine Wireless Access Point Devices Information Disclosure Vulnerability

Description The Longshine LCS-883R-AC-B device will allow tftp connections. An attacker can exploit this vulnerability to connect via tftp to the access point and download the configuration file without any authentication. The configuration file contains sensitive information including the...