Skip to content
OpenAdvisories

Product · Gladinet

Triofox

6 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.5

    Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS

    When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin_LoadHttpModule function in the dll would be called to set up a "module" object for that module. Howeve…

  • High 7.5

    Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS

    Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NUL…

  • High 7.5

    Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll

    A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome