447 matches found
3Com Shark Fin Comcast-supplied Default Password (deprecated)
Binary data 4824.prm...
3COM TFTP Buffer Overflow
!/usr/bin/perl 3comtftpbof.pl Jeremy Brown [email protected]/jbrownsec.blogspot.com Easily owns ancient 3CTftpSvc.zip Now how about a time machine and axx to 3com internal networks! use IO::Socket; $win2ksp4 = 0x77E43292; user32.dll JMP ESI $winxpsp3 = 0x7E485184; user32.dll JMP ESI $test1234 ...
3Com AP8760 authentication bypass
After initial password check autnentication is IP-address only...
3Com AP 8760绕过认证、泄露口令及SNMP注入漏洞
BUGTRAQ ID: 32358 3Com Wireless 8760 Dual-Radio 11a/b/g PoE是适用于各种类型企业的无线接入路由器。 3Com AP 8760的HTTP认证机制如下： 1. 路由器检查用户提交的凭据是否有效。 2. 如果有效，路由器的Web界面将用户重新定向到仅有通过认证的管理用户才可以使用的URL。...
PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760
PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760 Vulnerability Found: 6th November 2007 Vendor Informed: 2nd May 2008 Date Public: 14th November 2008 Severity: Medium Credits: Adrian Pastor of ProCheckUp Ltd www.procheckup.com. Vulnerability 1: Description: The...
3Com Wireless 8760 Dual-Radio 11a/b/g PoE - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues will allow an attacker to obtain...
ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability
ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-073 November 4, 2008 -- CVE ID: CVE-2008-4813 -- Affected Vendors: Adobe -- Affected Products: Adobe Acrobat -- TippingPointTM IPS Customer Protection: TippingPoint IPS...
3Com Wireless 8760 Dual-Radio 11a/b/g PoE HTTP POST请求拒绝服务漏洞
BUGTRAQ ID: 30988 CNCAN ID：CNCAN-2008090401 3Com Wireless 8760 Dual Radio 11a/b/g PoE是一款企业级网线访问接入点设备。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE WEB接口处理HTTP POST请求存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 WEB管理接口不正确处理畸形HTTP POST请求，可导致应用程序崩溃，造成拒绝服务攻击。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE 目前没有解决方案提供：...
ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability
ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-017 April 3, 2008 -- CVE ID: CVE-2008-1020 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- Vulnerability Details: This vulnerability allows attackers...
ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability
ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-016 April 3, 2008 -- CVE ID: CVE-2008-1018 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint...
ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability
ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-005.html February 11, 2008 -- CVE ID: CVE-2008-0639 -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPointTM IPS Customer Protection:...
ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability
ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-077.html December 17, 2007 -- CVE ID: -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...
ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability
ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-058.html October 16, 2007 -- CVE ID: CVE-2007-5766 -- Affected Vendor: Oracle -- Affected Products: E-Business Suite 11 E-Business Suite 12 -- TippingPointTM IPS Customer Protection:...
CVE-2002-2300
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...
CVE-2002-2300
CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...
CVE-2002-2300: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...
CVE-2007-5419
The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...
CVE-2007-5420
The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...
Design/Logic Flaw
The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...
Design/Logic Flaw
The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...