CVE-2005-0478

TrackerCam (web server)

CVE-2005-0480

CVE-2005-0480 is a cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier. The issue arises from accepting a login request that is recorded in a log file but not properly sanitized when an administrator views the log, allowing remote attackers to inject arbitrary HTML or web scri...

CVE-2005-0481

TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script...

CVE-2005-0478

Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP request with a long User-Agent header or 2 a long argument to an arbitrary PHP script...

CVE-2005-0480

Cross-site scripting XSS vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log file...

CVE-2005-0482

TrackerCam 5.12 and earlier is affected by CVE-2005-0482. The vulnerability allows remote denial of service (crash) via two vectors: (1) a large number of connections with a negative Content-Length header that may trigger a signedness error, and (2) a large amount of data. The sources cite these ...

CVE-2005-0479

CVE-2005-0479 : The vulnerability affects TrackerCam (TrackerCam 5.12 and earlier). A directory traversal flaw exists in ComGetLogFile.php3 that allows remote attackers to read arbitrary files by supplying a manipulated fn parameter with .. sequences and variations such as / , ****, or hex-encode...

CVE-2005-0479

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and 1 "/" slash, 2 "" backslash, or 3 hex-encoded characters in the fn parameter...

CVE-2005-0482

TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service crash via 1 a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or 2 a large amount of data...

TrackerCam 5.12 - ComGetLogFile.php3?fm Traversal Arbitrary File Access

TrackerCam 5.12 - ComGetLogFile.php3?fm Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12592/info TrackerCam is prone to multiple remote vulnerabilities, including buffer-overflow issues, a directory-traversal issue, an information-disclosure issue, an HTML-injection...