Memory leak in 3COM 812 DSL routers

Issue : Memory leak in 3COM DSL routers Affected product : OfficeConnect Remote 812 ADSL Router Affected Firware : 1.1.7 Inmune firwamre : 1.1.9 Description : 3Com develops OfficeConnect 812 DSL routers that are widely used in Spanish ADSL lines . There is a flaw in the 1.1.7 firmware that enable...

CVE-2001-1291

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing...

CVE-2001-1291

The CVE-2001-1291 entry concerns the telnet server on 3Com PS40 SuperStack II hardware that does not delay or disconnect after incorrect username/password attempts, enabling easier brute‑force access. Connected PT-2001-2418 notes affected versions are not specified, and there is no documented fix...

3com RAS 1500 / Wyse Winterm Malformed Packet Remote DoS

It was possible to crash the remote host by sending a specially crafted IP packet with a null length for IP option 0xE4 An attacker may use this flaw to prevent the remote host from accomplishing its job properly. C Tenable Network Security, Inc. THIS SCRIPT WAS NOT TESTED ! will only work with...

3Com SuperStack II RAS 1500 - IP Header Denial of Service

// source: https://www.securityfocus.com/bid/7175/info vulnerability has been reported in the 3Com SuperStack II RAS 1500 router. The problem occurs when processing network packets containing malicious IP headers. When received, the packet may cause the router to crash. / 3com superstack II RAS...

Multiple bugs in 3COM RAS 1500

Invalid IP options DoS, Web interface unauthorized access...

3Com SuperStack II RAS 1500 - Unauthorized Access

source: https://www.securityfocus.com/bid/7176/info A vulnerability has been reported in 3Com RAS 1500 router that may allow attackers to access sensitive data. Specifically, RAS 1500 devices fail to carry out authentication when requests are made for various files that may contain sensitive...

3com RAS 1500 Remote vulnerabilities.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: 3com RAS 1500 Remote vulnerabilities. Product: 3C433279A-US http://www.3com/ras1500 Version: Firmware X2.0.10 URL: http://isec.pl/vulnerabilities/isec-0009-3com-ras.txt Author: Piotr Chytla [email protected] Date: February 27, 2003 Issue: - ------...

3Com SuperStack II RAS 1500 - Unauthorized Access

3Com SuperStack II RAS 1500 - Unauthorized Access source: https://www.securityfocus.com/bid/7176/info A vulnerability has been reported in 3Com RAS 1500 router that may allow attackers to access sensitive data. Specifically, RAS 1500 devices fail to carry out authentication when requests are made...

3Com SuperStack II RAS 1500 - IP Header Denial of Service

3Com SuperStack II RAS 1500 - IP Header Denial of Service // source: https://www.securityfocus.com/bid/7175/info vulnerability has been reported in the 3Com SuperStack II RAS 1500 router. The problem occurs when processing network packets containing malicious IP headers. When received, the packet...

3Com SuperStack 3 Firewall - Content Filter Bypassing

3Com SuperStack 3 Firewall - Content Filter Bypassing source: https://www.securityfocus.com/bid/7021/info A vulnerability has been reported in the 3Com Superstack 3 Firewall. HTTP content filters put in place by the device fail to assemble fragmented data, potentially allowing an attacker to acce...

3Com SuperStack 3 Firewall - Content Filter Bypassing

source: https://www.securityfocus.com/bid/7021/info A vulnerability has been reported in the 3Com Superstack 3 Firewall. HTTP content filters put in place by the device fail to assemble fragmented data, potentially allowing an attacker to access unauthorized web sites. An attacker could exploit...

CVE-2002-2300

Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...

3Com NBX ftpd CEL Command Remote Overflow (2)

The remote FTP server appears to be affected by a buffer overflow that can be triggered with an overly-long 'CEL' command. This problem is similar to the 'aix ftpd' overflow but on embedded VxWorks-based systems like the 3Com NBX IP phone call manager and seems to cause the server to crash. It is...

3Com SuperStack 3 NBX 4.04.1 - FTPD Denial of Service

3Com SuperStack 3 NBX 4.04.1 - FTPD Denial of Service source: https://www.securityfocus.com/bid/6297/info It has been reported that the ftpd server, included in the Embedded Real Time Operating System ERTOS of 3Com Superstack 3 NBX IP phones, contains a denial of service vulnerability. This issue...

3Com NBX ftpd CEL Command Remote Overflow (1)

According to its banner, the remote FTP server is a version of VxWorks ftpd between 5.4 and 5.4.2. Such versions are known to be affected by a buffer overflow that can be triggered with an overly-long 'CEL' command. This problem is similar to the 'aix ftpd' overflow but on embedded VxWorks-based...

CVE-2002-0888

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router...

CVE-2002-0888

The CVE-2002-0888 entry concerns a 3Com OfficeConnect Remote 812 ADSL Router (firmware 1.1.9 and 1.1.7). The vulnerability allows remote attackers to bypass port access restrictions by first connecting to an approved port and then immediately connecting to the target port, effectively circumventi...

CVE-2002-0888

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router...

Part II: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: A more detailed description of 3Com ® OfficeConnect® Remote 812 ADSL Router DESCRIPTION: A big description of the vulnerability, Status and Solutions. I send this mail to explain the real problem and the solutions to all these people that were...