3Com AP8760 authentication bypass

After initial password check autnentication is IP-address only...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues will allow an attacker to obtain...

ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability

ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-073 November 4, 2008 -- CVE ID: CVE-2008-4813 -- Affected Vendors: Adobe -- Affected Products: Adobe Acrobat -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE HTTP POST请求拒绝服务漏洞

BUGTRAQ ID: 30988 CNCAN ID：CNCAN-2008090401 3Com Wireless 8760 Dual Radio 11a/b/g PoE是一款企业级网线访问接入点设备。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE WEB接口处理HTTP POST请求存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 WEB管理接口不正确处理畸形HTTP POST请求，可导致应用程序崩溃，造成拒绝服务攻击。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE 目前没有解决方案提供：...

ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability

ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-017 April 3, 2008 -- CVE ID: CVE-2008-1020 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- Vulnerability Details: This vulnerability allows attackers...

ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability

ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-016 April 3, 2008 -- CVE ID: CVE-2008-1018 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint...

ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-005.html February 11, 2008 -- CVE ID: CVE-2008-0639 -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPointTM IPS Customer Protection:...

ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability

ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-077.html December 17, 2007 -- CVE ID: -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability

ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-058.html October 16, 2007 -- CVE ID: CVE-2007-5766 -- Affected Vendor: Oracle -- Affected Products: E-Business Suite 11 E-Business Suite 12 -- TippingPointTM IPS Customer Protection:...

CVE-2002-2300

CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...

CVE-2002-2300

Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...

CVE-2002-2300: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5420

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

CVE-2007-5420

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5420

The CVE-2007-5420 entry concerns the 3Com 3CRWER100-75 router with firmware 1.2.10ww. When remote management is disabled but a web server is configured, it serves a page to external clients, potentially allowing remote attackers to determine the router’s existence and obtain product details. The ...

CVE-2007-5419

The CVE-2007-5419 entry concerns a 3Com 3CRWER100-75 router with 1.2.10ww software. When an optional virtual server is enabled, the device configures the server to accept all source IP addresses on the external interface unless other options are chosen, potentially exposing the router to remote a...