3 matches found
CVE-2024-43380 fugit parse and parse_nat stall on lengthy input
fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...
CVE-2020-8963
TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameter...
Windows NTP Time Server Syslog Monitor 1.0.000 Denial of Service Vulnerability
--Vulnerability Summary-- Title: Windows NTP Time Server Syslog Monitor 1.0.000 Denial of Service Vulnerability Product: Windows NTP Time Server Syslog Monitor 1.0.000 Discovered: November 29, 2008 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: TimeTools Vendor URL:...