Tumbleweed SecureTransport Detection

Detection of the installation and version of a Tumbleweed SecureTransport. The script sends HTTP GET requests and tries to confirm the Tumbleweed SecureTransport installation and version from the responses. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted fro...

Tumbleweed SecureTransport Directory Traversal Vulnerability

Tumbleweed SecureTransport is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Tumbleweed SecureTransport vcst_eu.dll ActiveX Control Buffer Overflows

The remote host contains the TumbleWeed SecureTransport ActiveX control, used to perform secure file transfer functions. The version of this control on the remote host is reportedly affected by multiple stack-based buffer overflows. If an attacker can trick a user on the affected host into visiti...

CVE-2008-1724: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcsten.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter...

Tumbleweed SecureTransport vcst_eu.dll ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 28666 Tumbleweed SecureTransport是安全的文件传输解决方案，允许用户通过Internet传输敏感文件。 SecureTransport的FileTransfer ActiveX控件（vcsten.dll，CLSID：38681fbd-d4cc-4a59-a527-b3136db711d3）中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 相关代码： interface IActiveXTransfer : IDispatch id0x00000007, helpstring"method TransferFile"...

tumbleweed-overflow.txt

!-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File...

Tumbleweed SecureTransport FileTransfer ActiveX BOF Exploit

No description provided by source. !-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the...

Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File Transfer...

Tumbleweed SecureTransport FileTransfer ActiveX buffer overflow

Buffer overflow in TransferFile method...

Tumbleweed SecureTransport FileTransfer ActiveX BOF Exploit

Exploit for unknown platform in category remote exploits =========================================================== Tumbleweed SecureTransport FileTransfer ActiveX BOF Exploit =========================================================== !-- aushack.com - Vulnerability Advisory...

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

!-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File...

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow !-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description:...

Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the vcsteu.dll FileTransfer Module 1.0.0.5 ActiveX control in the Tumbleweed SecureTransport suite. By sending an overly long string to the TransferFile 'remotefile' function, an attacker may be able to execute arbitrary code. Module Options msf use...