PT-2020-5615

Name of the Vulnerable Software and Affected Versions uIP version 1.0 Contiki version 3.0 Description An issue was discovered in uIP, as used in Contiki and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to us...

CVE-2018-20606

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

PT-2018-15470

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows for full path disclosure through a specific URI. The affected endpoint is "dev.php?tools-ipaddr&api=Pcoln&uip=" and it is related to the uip variable. Recommendations For imcat version 4.4, consid...

CVE-2018-20606: Exposure of Sensitive Information to an Unauthorized Actor

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

CVE-2014-4883

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...

Design/Logic Flaw

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...

CVE-2014-4883

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...

CVE-2014-4883

CVE-2014-4883 affects the DNS resolver code paths in uIP and lwIP (resolv.c/dns.c for lwIP

CVE-2014-4883

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...

PT-2014-6187

Name of the Vulnerable Software and Affected Versions lwIP versions 1.4.1 and earlier uIP affected versions not specified Description The issue concerns the DNS resolver in uIP and lwIP, where the resolv.c and dns.c files do not utilize random values for ID fields and source ports of DNS query...

CVE-2014-4883: Insufficient Verification of Data Authenticity

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...

CVE-2007-1538: Undefined Security Weakness

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...