Page 2 of 11 results (0.080 seconds)

CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request. • http://secunia.com/advisories/19844 http://www.rapid7.com/advisories/R7-0020.html http://www.securityfocus.com/bid/17718 http://www.vupen.com/english/advisories/2006/1562 http://www.winagents.com/en/news/410.php https://exchange.xforce.ibmcloud.com/vulnerabilities/25971 •

CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 3

WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow. • http://secunia.com/advisories/11840 http://securitytracker.com/id?1010464 http://www.osvdb.org/6848 http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt http://www.securityfocus.com/bid/10526 https://exchange.xforce.ibmcloud.com/vulnerabilities/16390 •

CVSS: 5.0EPSS: 3%CPEs: 1EXPL: 3

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. SolarWinds TFTP server 5.0.55 y anteriores permite a atacantes remotos causar la Denegación de Servicios (DoS)(caida) mediante un datagrama UDP largo, posiblemete provocando un desbordamiento de búfer. • https://www.exploit-db.com/exploits/21963 http://archives.neohapsis.com/archives/bugtraq/2002-10/0344.html http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0040.html http://www.iss.net/security_center/static/10462.php http://www.securityfocus.com/bid/6043 •

CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 1

tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux. • http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html http://www.kb.cert.org/vuls/id/632633 https://exchange.xforce.ibmcloud.com/vulnerabilities/10817 • CWE-20: Improper Input Validation •

CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 2

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request. Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una petición GET. • https://www.exploit-db.com/exploits/21964 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html http://www.idefense.com/advisory/10.24.02.txt http://www.securityfocus.com/bid/6045 https://exchange.xforce.ibmcloud.com/vulnerabilities/10469 •