6 results (0.007 seconds)

CVSS: 7.5EPSS: 25%CPEs: 1EXPL: 2

16 Jun 2010 — SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. SolarWinds TFTP Server v10.4.0.13, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición de escritura larga. • https://www.exploit-db.com/exploits/13836 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 81%CPEs: 1EXPL: 3

28 May 2010 — SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. Servidor SolarWinds TFTP v10.4.0.10 permite a atacantes remotos provocar una denegación de servicio (impide conexiones nuevas) a través de una petición de lectura manipulada. The SolarWinds TFTP server can be shut down by sending a netascii read request with a specially crafted file name. • https://packetstorm.news/files/id/180555 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 7%CPEs: 5EXPL: 3

09 Sep 2009 — SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information. SolarWinds TFTP Server v9.2.0.111 y anteriores permite a atacantes remotos provocar una denegación de servicio (parada del servicio) a través de una petición Option Acknowledgement (OACK) manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de información ... • https://www.exploit-db.com/exploits/9547 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 2%CPEs: 3EXPL: 0

24 Apr 2006 — Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering. • http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html •

CVSS: 7.5EPSS: 7%CPEs: 1EXPL: 3

18 Mar 2003 — SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. SolarWinds TFTP server 5.0.55 y anteriores permite a atacantes remotos causar la Denegación de Servicios (DoS)(caida) mediante un datagrama UDP largo, posiblemete provocando un desbordamiento de búfer. • https://www.exploit-db.com/exploits/21963 •

CVSS: 7.5EPSS: 5%CPEs: 1EXPL: 2

29 Oct 2002 — Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request. Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una petición GET. • https://www.exploit-db.com/exploits/21964 •