Buffer overflow

Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-3121

CVE-2010-3121: The DevonIT thin-client management tool’s tm-console-bin component suffers a buffer overflow that could let remote attackers execute arbitrary code via unspecified vectors. Affected product: DevonIT thin-client management tool (tm-console-bin). Root cause: unchecked buffer handling...

CVE-2010-3121

Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-3122

CVE-2010-3122 concerns the DevonIT thin-client management tool, where authentication relies on a shared secret and that secret is transmitted in cleartext. The result is that an attacker able to sniff network traffic could discover the secret and potentially gain administrative control over clien...

CVE-2010-3122

The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network...

DevonIT weak authentication and buffer overflow in /usr/bin/tm-console-bin

Overview The DevonIT management tool for thin clients uses a shared secret that is transmitted over the network in the clear. The /usr/bin/tm-console-bin application contains a buffer overflow, which may allow an attacker to execute arbitrary code. Description The management tool transmits an...

Thin Webserver Detection

This host is running Thin, a Ruby web server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Design/Logic Flaw

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

DEBIAN-CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

CVE-2009-3287

CVE-2009-3287 affects Thin (lib/thin/connection.rb) prior to 1.2.4. The root cause is reliance on the X-Forwarded-For header to determine the client IP, allowing remote attackers to spoof the IP address and hide activities via a modified header. Impact is described as partial confidentiality, int...

CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

Wyse Thin Client hagent.exe Unspecified Buffer Overflow

Binary data wysehagent.nbin...

X2 Thin Client Server Detection (deprecated)

Binary data 4453.prm...

X2 Thin Client Server Detection

Binary data 4452.prm...

AK-Systems Windows Terminals远程未授权管理访问漏洞

基于WinCE的Windows Terminals thin客户端由AK-Systems公司制作的包含VNC服务来远程管理和设置的应用程序。 新固件版本的应用程序其VNC访问没有通过密码保护，因此任何有VNC客户端的用户可以连接终端并查看RDP/Citrix会话或进行中间人攻击。 AK-Systems Windows Terminal 1.2.5 ExVLP http://www.ak-systems.ru/products/models/...

GO-Global Server Detection

The remote host is running a GO-Global server, a commercial thin- client computing solution for Windows and unix. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20177; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Graphon Go-Global thin client and server solution buffer overflow

Buffer overflow in initial protocol handshake...

CVE-2004-2050

CVE-2004-2050 concerns eSeSIX Thintune Thin Client firmware 2.4.38 and earlier. Local users can gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the hard-coded password maertsJ in lshell, enabling a local privilege escalation. OpenVAS notes a backdoor password (jstwo) in Thintune, indi...