CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3533

The vulnerability CVE-2007-3533 affects the 3Com IntelliJack Switch NJ220 with firmware versions prior to 2.0.23. A malformed loopback packet with a zero length field can be sent remotely to cause a reboot and outage of reporting functions, resulting in a denial of service. The public description...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

3Com IntelliJack交换机NJ220回环远程拒绝服务漏洞

BUGTRAQ ID: 24705 3Com NJ220 IntelliJack是一款智能可管理的交换机。 NJ220 IntelliJack在处理畸形的报文时存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务 如果向NJ220交换机发送了长度为0的回环报文的话，就会导致NJ220重启，并停止向中央配置管理器工具发送事件报文。 3Com IntelliJack Switch NJ220 2.0.21 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.3com.com...

CVE-2006-3974

Cross-site scripting XSS vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter...

CVE-2006-3974

CVE-2006-3974 affects 3Com OfficeConnect Secure Router firmware 1.04-168, where a cross-site scripting (XSS) flaw in the admin CGI (cgi-bin/admin) allows remote attackers to inject arbitrary web script or HTML via the tk parameter. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with n...

3Com OfficeConnect Secure Router 1.04-168 - Tk Cross-Site Scripting

3Com OfficeConnect Secure Router 1.04-168 - Tk Cross-Site Scripting source: https://www.securityfocus.com/bid/24374/info OfficeConnect Secure Router is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...

Cross site request forgery (csrf)

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2734

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2734

The CVE-2007-2734 entry concerns the 3Com TippingPoint IPS failing to properly handle certain full-width/half-width Unicode encodings in HTTP POST requests, which could allow remote attackers to evade detection of HTTP traffic. Affected product: 3Com TippingPoint IPS. Root cause: improper encodin...

CVE-2007-2734

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability

ZDI-07-033: Samba lsaiotransnames Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-033.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-025.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-026.html May 8, 2007 -- CVE ID: CVE-2007-0215 -- Affected Vendor: Microsoft -- Affected Products: Office Excel 2000 Office Excel 2002 Office Exce...

CVE-2007-2276

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...

Design/Logic Flaw

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...

CVE-2007-2276

The CVE-2007-2276 issue affects 3Com TippingPoint IPS. A badly written loop allows remote attackers to cause a denial of service (device hang) by flooding TCP port 80 with packets that have sequentially increasing source ports. The vendor disputes the issue, stating the product has performed as e...

CVE-2007-2276

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...

3COM TippingPoint intrusion prevension system DoS

Packets flood to TCP/80 port leads to resources exhaustion...

3Com's TippingPoint Denial of Service

Vulnerability: Denial of Service Affected Product: 3Com's TippingPoint IPS Affected Versions: All Author: CorrodedLunchmeatsX Issue: ====== TippingPoint IPS is prone to DoS when a sequence of crafted packets are destined for port 80. Details: ======== When quickly flooded with packets destined fo...