Cisco Industrial Ethernet 3000 Series switches have hardcoded SNMP community strings

Overview Cisco Industrial Ethernet 3000 IE 3000 Series switches running Cisco IOS Software releases 12.252SE or 12.252SE1, contain well-known, hard-coded read and write SNMP community strings. An remote attacker could take full control of a vulnerable device. Description Cisco Industrial Ethernet...

Code injection

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...

CVE-2010-1574

CVE-2010-1574 affects Cisco Industrial Ethernet 3000 Series switches running IOS 12.2(52)SE or 12.2(52)SE1, where hard-coded SNMP read/write community strings (public for RO and private for RW) can let remote attackers modify configurations or gain sensitive info via SNMP. Cisco’s advisory (CSCtf...

CVE-2010-1574: Undefined Security Weakness

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...

MDaemon Raw Message Handler Buffer Overflow (CVE-2003-1200)

WorldClient is a program listening on TCP/3000 and executing the CGI program Form2Raw, which processes HTTP requests. The vulnerable products do not require any user credentials to access the program. The specially crafted content will be passed unchecked to the vulnerable server program, MDaemon...

Sql injection

SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page...

CVE-2010-0469

SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page...

CVE-2010-0469

CVE-2010-0469 describes an SQL injection flaw in Files2Links F2L 3000 appliance 4.0.0 (and potentially other versions/models) that allows remote attackers to execute arbitrary SQL commands via unspecified parameters on the login page. Root cause: unsafe SQL construction in the login flow. Impact,...

CVE-2010-0469: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page...

Files2links F2L-3000 SQL injection

SQL injection on authentication page...

DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability

Title ----- DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability Severity -------- Medium Date Discovered --------------- November 19, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Rob Kraus, Chris Graham and r@b13$ Vulnerability Description...

WEBurada Dernek Koy Portali 3000 X Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || Script Name : WEBurada Dernek Köy Portalý 3000 X Bug Type : XSS vulnerability Founder: LionTurk - [email protected]...

CVE-2008-7162

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

Buffer overflow

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162

CVE-2008-7162 describes a buffer overflow in Hero Super Player 3000 (Hero DVD Player 3.0.x family) that can be triggered by a long filename in an M3U playlist, allowing remote attackers to crash the application and potentially execute arbitrary code. The note indicates a possible relation to CVE-...

CVE-2008-7162

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2009-3000

CVE-2009-3000 affects Sun Solaris 10 and OpenSolaris (SNV_41 through SNV_122) where the sockfs kernel module, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to trigger a denial of service (panic) via unspecified web-server traffic that causes a NULL pointer deref...

Solaris 10 (sparc) : 141690-02

SunOS 5.10: sockfs patch. Date this patch was last updated by Sun : Aug/25/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access

This module tests for a logic vulnerability in the Cisco VPN Concentrator 3000 series. It is possible to execute some FTP statements without authentication CWD, RNFR, MKD, RMD, SIZE, CDUP. It also appears to have some memory leak bugs when working with CWD commands. This module simply creates an...