Shibby Tomato vulnerabilities

A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This project is superseded by FreshTomato.

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of the file /etc/qoslimit. The manipulation of the argument new_qoslimit_enable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.

A vulnerability was found in Shibby Tomato 1.28.0000 in the function new_qoslimit_stop of /tmp/qoslimittc_stop.sh. Manipulating the wan_iface argument leads to OS command injection. The attack can be launched remotely.

A stack-based buffer overflow vulnerability was found in Shibby Tomato 1.28 in the sub_42537C function of the Scheduler Name Handler component. Manipulation of the a1 argument allows remote exploitation. This project is superseded by FreshTomato.

In Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124, a stack-based buffer overflow vulnerability exists in the sub_40BB50 function of the /proc/webmon_recent_domains file. The attack can be performed remotely. This project is superseded by FreshTomato.

A flaw in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124 in the setup_conntrack function of /sbin/rc allows out-of-bounds write via the ct_tcp_timeout argument. The attack can be performed remotely.

A security vulnerability was found in Shibby Tomato up to version 1.28.0000 in the sub_407220 function of the /usr/sbin/httpd file within the DNS List Rendering component. Manipulation leads to a stack-based buffer overflow, which can be exploited remotely. This project is superseded by FreshTomato.

A vulnerability in Shibby Tomato up to version 1.28.0000 allows OS command injection via the CIFS Mount Handler component's sub_2D048 function. Manipulating the cifs1/cifs2 argument enables remote command execution. The exploit is publicly available, increasing attack risk.

A security flaw in Shibby Tomato up to 1.28.0000 affects the sub_2D568 function of the start_jffs2 component. Manipulating the jffs2_exec argument leads to OS command injection. Remote exploitation is possible and the exploit has been publicly released.

In Shibby Tomato up to version 1.28.0000, the apcupsd component's getupsvar function in www/apcupsd/tomatodata.cgi is vulnerable to a stack-based buffer overflow via the Field argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A vulnerability in Shibby Tomato 1.28.0000 in the rstats_path function allows remote OS command injection. Exploit is publicly available.

A vulnerability in Shibby Tomato 1.28.0000 in the start_vpnserver function allows remote OS command injection. Exploit is publicly available.

In Shibby Tomato 1.28.0000, the Web UI component's start_6rd_tunnel function in /sbin/rc is vulnerable to OS command injection via the ipv6_6rd_borderrelay argument. The attack can be launched remotely and the exploit has been made public.

In Shibby Tomato 1.28.0000, the Web UI component's start_dhcpc function in /sbin/rc is vulnerable to OS command injection. The attack can be initiated remotely and the exploit has been published.

A stack-based buffer overflow was determined in Shibby Tomato up to version 1.28 in the rip_zebra_read_ipv4 function of the /usr/sbin/ripd file. The attack can be launched remotely, and the exploit is publicly available. The project is superseded by FreshTomato and no longer supported.

A stack-based buffer overflow vulnerability was found in Shibby Tomato 1.28 in the sub_90F0 function of multimon.cgi. The attack can be launched remotely. This project is superseded by FreshTomato and is no longer supported.

A security vulnerability was found in Shibby Tomato up to version 1.28. The issue affects the sub_9068 function in the tomatoups.cgi file of the UPS Service component, leading to a stack-based buffer overflow. The attack can be initiated remotely, and the project is superseded by FreshTomato.

A vulnerability was found in Shibby Tomato 1.28 in the get_ups_field function of tomatodata.cgi. Manipulating the Date argument can cause a stack-based buffer overflow. The attack can be launched remotely.