CVE-2007-5420: Exposure of Sensitive Information to an Unauthorized Actor

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

3Com WIFI router remote administration vulnerability.

3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...

CVE-2007-5419: Undefined Security Weakness

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

CVE-2004-2691

CVE-2004-2691 applies to 3Com SuperStack 3 4400 switches with firmware before 3.31. The vulnerability allows a remote attacker to cause a denial of service by sending a crafted request to the web management interface. Reports vary: some state the device resets, others describe a temporary unrespo...

CVE-2004-2691: Undefined Security Weakness

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

ZDI-07-051: Trend Micro ServerProtect TMregChange() Stack Overflow Vulnerability

ZDI-07-051: Trend Micro ServerProtect TMregChange Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-051.html September 7, 2007 -- CVE ID: CVE-2007-4731 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection...

ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities

ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-049.html August 20, 2007 -- CVE ID: CVE-2007-3618 -- Affected Vendor: EMC Software -- Affected Products: Networker 7.x.x -- TippingPointTM IPS Customer Protection...

[Full-disclosure] ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability

ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-046.html August 14, 2007 -- CVE ID: CVE-2007-3037 -- Affected Vendor: Microsoft -- Affected Products: Windows Media Player 7.1 Windows Media Player ...

[Full-disclosure] ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability

ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-047.html August 14, 2007 -- CVE ID: CVE-2007-3035 -- Affected Vendor: Microsoft -- Affected Products: Windows Media Player 7.1 Windows Media Player 9...

3COM Tippingpoint multiple protection bypass ways

Invalid fragmented IP reassembly, some attacks against IIS may pass undetected...

Design/Logic Flaw

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3533

The vulnerability CVE-2007-3533 affects the 3Com IntelliJack Switch NJ220 with firmware versions prior to 2.0.23. A malformed loopback packet with a zero length field can be sent remotely to cause a reboot and outage of reporting functions, resulting in a denial of service. The public description...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

3Com IntelliJack交换机NJ220回环远程拒绝服务漏洞

BUGTRAQ ID: 24705 3Com NJ220 IntelliJack是一款智能可管理的交换机。 NJ220 IntelliJack在处理畸形的报文时存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务 如果向NJ220交换机发送了长度为0的回环报文的话，就会导致NJ220重启，并停止向中央配置管理器工具发送事件报文。 3Com IntelliJack Switch NJ220 2.0.21 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.3com.com...

CVE-2007-3533: Undefined Security Weakness

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2006-3974

Cross-site scripting XSS vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter...

CVE-2006-3974

CVE-2006-3974 affects 3Com OfficeConnect Secure Router firmware 1.04-168, where a cross-site scripting (XSS) flaw in the admin CGI (cgi-bin/admin) allows remote attackers to inject arbitrary web script or HTML via the tk parameter. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with n...

CVE-2006-3974: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter...