Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
6 vulnerabilities by wyse
VAR-201206-0001
Vulnerability from variot - Updated: 2023-12-18 13:49Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe. Wyse Device Manager (WDM) Server and HAgent contain several vulnerabilities. An attacker with network access to WDM components could execute arbitrary code on vulnerable systems. Failed attempts will likely cause a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201206-0001",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "wyse device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "4.7.1"
},
{
"model": "wyse device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "4.7.0"
},
{
"model": "wyse device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "4.7.2"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "wyse",
"version": null
},
{
"model": "wyse device manager",
"scope": "eq",
"trust": 0.8,
"vendor": "wise",
"version": "4.7.x"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:dell:wyse_device_manager:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dell:wyse_device_manager:4.7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dell:wyse_device_manager:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0693"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unknown",
"sources": [
{
"db": "BID",
"id": "82987"
}
],
"trust": 0.3
},
"cve": "CVE-2009-0693",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2009-0693",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-38139",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-0693",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#654545",
"trust": 0.8,
"value": "13.51"
},
{
"author": "CNNVD",
"id": "CNNVD-201206-353",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-38139",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38139"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe. Wyse Device Manager (WDM) Server and HAgent contain several vulnerabilities. An attacker with network access to WDM components could execute arbitrary code on vulnerable systems. Failed attempts will likely cause a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "BID",
"id": "82987"
},
{
"db": "VULHUB",
"id": "VHN-38139"
}
],
"trust": 2.7
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-38139",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38139"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#654545",
"trust": 3.6
},
{
"db": "NVD",
"id": "CVE-2009-0693",
"trust": 2.8
},
{
"db": "OSVDB",
"id": "55808",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201206-353",
"trust": 0.7
},
{
"db": "FULLDISC",
"id": "20090710 \u0027SECURE\u0027 WYSE THIN CLIENTS VULNERABLE TO REMOTE EXPLOIT BUGS",
"trust": 0.6
},
{
"db": "BID",
"id": "82987",
"trust": 0.3
},
{
"db": "SEEBUG",
"id": "SSVID-73097",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "19137",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-38139",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38139"
},
{
"db": "BID",
"id": "82987"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"id": "VAR-201206-0001",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-38139"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:49:10.055000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Wyse Device Manager",
"trust": 0.8,
"url": "http://www.wyse.co.jp/products/software/devicemanager/index.asp"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38139"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "NVD",
"id": "CVE-2009-0693"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.8,
"url": "http://www.wyse.com/serviceandsupport/wyse%20security%20bulletin%20wsb09-01.pdf"
},
{
"trust": 2.8,
"url": "http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/"
},
{
"trust": 2.8,
"url": "http://www.kb.cert.org/vuls/id/654545"
},
{
"trust": 2.5,
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html"
},
{
"trust": 0.8,
"url": "http://osvdb.org/show/osvdb/55808"
},
{
"trust": 0.8,
"url": "http://www.wyse.com/serviceandsupport/support/wsb09-01.zip"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0693"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0693"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38139"
},
{
"db": "BID",
"id": "82987"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38139"
},
{
"db": "BID",
"id": "82987"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-10-13T00:00:00",
"db": "CERT/CC",
"id": "VU#654545"
},
{
"date": "2012-06-19T00:00:00",
"db": "VULHUB",
"id": "VHN-38139"
},
{
"date": "2012-06-19T00:00:00",
"db": "BID",
"id": "82987"
},
{
"date": "2012-06-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"date": "2012-06-19T20:55:02.037000",
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"date": "2012-06-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-10-16T00:00:00",
"db": "CERT/CC",
"id": "VU#654545"
},
{
"date": "2012-06-20T00:00:00",
"db": "VULHUB",
"id": "VHN-38139"
},
{
"date": "2016-07-05T21:23:00",
"db": "BID",
"id": "82987"
},
{
"date": "2012-06-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-002800"
},
{
"date": "2012-06-20T04:00:00",
"db": "NVD",
"id": "CVE-2009-0693"
},
{
"date": "2012-06-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Wyse Device Manager (WDM) HServer and HAgent contain multiple vulnerabilities",
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201206-353"
}
],
"trust": 0.6
}
}
VAR-201206-0002
Vulnerability from variot - Updated: 2023-12-18 13:49hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action. Wyse Device Manager (WDM) Server and HAgent contain several vulnerabilities. An attacker with network access to WDM components could execute arbitrary code on vulnerable systems. Successful exploits will allow remote attackers to execute arbitrary commands within the context of the affected application. Successfully exploiting this issue may allow an attacker to bypass security restrictions and perform unauthorized actions
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201206-0002",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "wyse device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "4.7.1"
},
{
"model": "wyse device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "4.7.0"
},
{
"model": "wyse device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "4.7.2"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "wyse",
"version": null
},
{
"model": "wyse device manager",
"scope": "eq",
"trust": 0.8,
"vendor": "wise",
"version": "4.7.x"
},
{
"model": "device manager workgroup edition",
"scope": "eq",
"trust": 0.3,
"vendor": "wyse",
"version": "4.7.2"
},
{
"model": "device manager workgroup edition",
"scope": "eq",
"trust": 0.3,
"vendor": "wyse",
"version": "4.7"
},
{
"model": "device manager enterprise edition",
"scope": "eq",
"trust": 0.3,
"vendor": "wyse",
"version": "4.7.2"
},
{
"model": "device manager enterprise edition",
"scope": "eq",
"trust": 0.3,
"vendor": "wyse",
"version": "4.7"
},
{
"model": "thin client",
"scope": "eq",
"trust": 0.3,
"vendor": "wyse",
"version": "0"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "BID",
"id": "54015"
},
{
"db": "BID",
"id": "54028"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:dell:wyse_device_manager:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dell:wyse_device_manager:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dell:wyse_device_manager:4.7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0695"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Kevin Finisterre of Netragard/SNOsoft",
"sources": [
{
"db": "BID",
"id": "54015"
}
],
"trust": 0.3
},
"cve": "CVE-2009-0695",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2009-0695",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-38141",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-0695",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#654545",
"trust": 0.8,
"value": "13.51"
},
{
"author": "CNNVD",
"id": "CNNVD-201206-354",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-38141",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38141"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action. Wyse Device Manager (WDM) Server and HAgent contain several vulnerabilities. An attacker with network access to WDM components could execute arbitrary code on vulnerable systems. \nSuccessful exploits will allow remote attackers to execute arbitrary commands within the context of the affected application. \nSuccessfully exploiting this issue may allow an attacker to bypass security restrictions and perform unauthorized actions",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "BID",
"id": "54015"
},
{
"db": "BID",
"id": "54028"
},
{
"db": "VULHUB",
"id": "VHN-38141"
}
],
"trust": 2.97
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-38141",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38141"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#654545",
"trust": 3.9
},
{
"db": "NVD",
"id": "CVE-2009-0695",
"trust": 3.1
},
{
"db": "EXPLOIT-DB",
"id": "19137",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "55808",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201206-354",
"trust": 0.7
},
{
"db": "FULLDISC",
"id": "20090710 \u0027SECURE\u0027 WYSE THIN CLIENTS VULNERABLE TO REMOTE EXPLOIT BUGS",
"trust": 0.6
},
{
"db": "BID",
"id": "54028",
"trust": 0.4
},
{
"db": "BID",
"id": "54015",
"trust": 0.4
},
{
"db": "PACKETSTORM",
"id": "113683",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "82289",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "9934",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-66986",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-38141",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38141"
},
{
"db": "BID",
"id": "54015"
},
{
"db": "BID",
"id": "54028"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"id": "VAR-201206-0002",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-38141"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:49:10.019000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Wyse Device Manager",
"trust": 0.8,
"url": "http://www.wyse.com/products/software/management/wdm"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-287",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38141"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "NVD",
"id": "CVE-2009-0695"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://www.wyse.com/serviceandsupport/wyse%20security%20bulletin%20wsb09-01.pdf"
},
{
"trust": 3.1,
"url": "http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/"
},
{
"trust": 3.1,
"url": "http://www.kb.cert.org/vuls/id/654545"
},
{
"trust": 2.5,
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html"
},
{
"trust": 1.7,
"url": "http://www.exploit-db.com/exploits/19137/"
},
{
"trust": 0.8,
"url": "http://osvdb.org/show/osvdb/55808"
},
{
"trust": 0.8,
"url": "http://www.wyse.com/serviceandsupport/support/wsb09-01.zip"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0695"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0695"
},
{
"trust": 0.3,
"url": "http://www.wyse.com/products/software/devicemanager/index.asp"
},
{
"trust": 0.3,
"url": "http://wyse.com/index.asp"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38141"
},
{
"db": "BID",
"id": "54015"
},
{
"db": "BID",
"id": "54028"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#654545"
},
{
"db": "VULHUB",
"id": "VHN-38141"
},
{
"db": "BID",
"id": "54015"
},
{
"db": "BID",
"id": "54028"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-10-13T00:00:00",
"db": "CERT/CC",
"id": "VU#654545"
},
{
"date": "2012-06-19T00:00:00",
"db": "VULHUB",
"id": "VHN-38141"
},
{
"date": "2009-07-10T00:00:00",
"db": "BID",
"id": "54015"
},
{
"date": "2009-10-13T00:00:00",
"db": "BID",
"id": "54028"
},
{
"date": "2012-06-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"date": "2012-06-19T20:55:02.630000",
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"date": "2012-06-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-10-16T00:00:00",
"db": "CERT/CC",
"id": "VU#654545"
},
{
"date": "2012-06-26T00:00:00",
"db": "VULHUB",
"id": "VHN-38141"
},
{
"date": "2009-07-10T00:00:00",
"db": "BID",
"id": "54015"
},
{
"date": "2009-10-13T00:00:00",
"db": "BID",
"id": "54028"
},
{
"date": "2012-06-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-002801"
},
{
"date": "2012-06-26T04:00:00",
"db": "NVD",
"id": "CVE-2009-0695"
},
{
"date": "2012-06-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "network",
"sources": [
{
"db": "BID",
"id": "54015"
},
{
"db": "BID",
"id": "54028"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Wyse Device Manager (WDM) HServer and HAgent contain multiple vulnerabilities",
"sources": [
{
"db": "CERT/CC",
"id": "VU#654545"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "authorization issue",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201206-354"
}
],
"trust": 0.6
}
}
CVE-2010-3031 (GCVE-0-2010-3031)
Vulnerability from nvd – Published: 2010-08-17 17:31 – Updated: 2024-09-17 03:29
VLAI
EPSS
VEX
Summary
Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://www.kb.cert.org/vuls/id/JALR-87AKR5 | x_refsource_CONFIRM |
| http://www.kb.cert.org/vuls/id/320233 | third-party-advisoryx_refsource_CERT-VN |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T02:55:46.454Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-87AKR5"
},
{
"name": "VU#320233",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/320233"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2010-08-17T17:31:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-87AKR5"
},
{
"name": "VU#320233",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/320233"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-3031",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.kb.cert.org/vuls/id/JALR-87AKR5",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/JALR-87AKR5"
},
{
"name": "VU#320233",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/320233"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-3031",
"datePublished": "2010-08-17T17:31:00.000Z",
"dateReserved": "2010-08-17T00:00:00.000Z",
"dateUpdated": "2024-09-17T03:29:02.882Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2577 (GCVE-0-2005-2577)
Vulnerability from nvd – Published: 2005-08-16 04:00 – Updated: 2024-08-07 22:30
VLAI
EPSS
VEX
Summary
Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://marc.info/?l=bugtraq&m=112379283900586&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/16409 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/14536 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1014659 | vdb-entryx_refsource_SECTRACK |
Date Public
2005-08-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:30:01.626Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20050810 remote DOS on Wyse thin client 1125SE",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112379283900586\u0026w=2"
},
{
"name": "16409",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16409"
},
{
"name": "14536",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14536"
},
{
"name": "1014659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014659"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-08-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20050810 remote DOS on Wyse thin client 1125SE",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112379283900586\u0026w=2"
},
{
"name": "16409",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16409"
},
{
"name": "14536",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14536"
},
{
"name": "1014659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014659"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2577",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20050810 remote DOS on Wyse thin client 1125SE",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112379283900586\u0026w=2"
},
{
"name": "16409",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16409"
},
{
"name": "14536",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14536"
},
{
"name": "1014659",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014659"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2577",
"datePublished": "2005-08-16T04:00:00.000Z",
"dateReserved": "2005-08-16T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:30:01.626Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-3031 (GCVE-0-2010-3031)
Vulnerability from cvelistv5 – Published: 2010-08-17 17:31 – Updated: 2024-09-17 03:29
VLAI
EPSS
VEX
Summary
Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://www.kb.cert.org/vuls/id/JALR-87AKR5 | x_refsource_CONFIRM |
| http://www.kb.cert.org/vuls/id/320233 | third-party-advisoryx_refsource_CERT-VN |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T02:55:46.454Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-87AKR5"
},
{
"name": "VU#320233",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/320233"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2010-08-17T17:31:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/JALR-87AKR5"
},
{
"name": "VU#320233",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/320233"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-3031",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.kb.cert.org/vuls/id/JALR-87AKR5",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/JALR-87AKR5"
},
{
"name": "VU#320233",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/320233"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-3031",
"datePublished": "2010-08-17T17:31:00.000Z",
"dateReserved": "2010-08-17T00:00:00.000Z",
"dateUpdated": "2024-09-17T03:29:02.882Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2577 (GCVE-0-2005-2577)
Vulnerability from cvelistv5 – Published: 2005-08-16 04:00 – Updated: 2024-08-07 22:30
VLAI
EPSS
VEX
Summary
Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://marc.info/?l=bugtraq&m=112379283900586&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/16409 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/14536 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1014659 | vdb-entryx_refsource_SECTRACK |
Date Public
2005-08-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:30:01.626Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20050810 remote DOS on Wyse thin client 1125SE",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112379283900586\u0026w=2"
},
{
"name": "16409",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16409"
},
{
"name": "14536",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14536"
},
{
"name": "1014659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014659"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-08-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20050810 remote DOS on Wyse thin client 1125SE",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112379283900586\u0026w=2"
},
{
"name": "16409",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16409"
},
{
"name": "14536",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14536"
},
{
"name": "1014659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014659"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2577",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20050810 remote DOS on Wyse thin client 1125SE",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112379283900586\u0026w=2"
},
{
"name": "16409",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16409"
},
{
"name": "14536",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14536"
},
{
"name": "1014659",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014659"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2577",
"datePublished": "2005-08-16T04:00:00.000Z",
"dateReserved": "2005-08-16T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:30:01.626Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}