CVE-2001-1007

CVE-2001-1007 affects Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA. The vulnerability arises from a small keyspace for device keys and the absence of a delay on incorrect keys, enabling faster brute-force guessing of the key. The NVD entry lists a MEDIUM base score (5.0/10) with net...

CVE-2001-1006

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...

CVE-2001-1007

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...

CVE-2001-1007: Undefined Security Weakness

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...

CVE-2001-1005: Undefined Security Weakness

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges...

CVE-2001-1006: Undefined Security Weakness

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...

Three Windows XP UPNP DOS attacks

Below you will find a quick recap of a few denial of service exploits I discovered against Windows XP and selected versions of WinME. Microsoft confirmed my findings: bulletin MS01-54. The paper is a narrative and the author hopes it will be useful for newbies and an enjoyable paper for the...

CVE-2001-0429

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-2001-0429

CVE-2001-0429 affects Cisco Catalyst 5000 series switches (versions 6.1(2) and earlier). The issue occurs when an 802.1x frame is received on a STP blocked port and is forwarded within that VLAN, causing a network storm and a denial of service. The connected Nessus/CSCs detail the same STP/802.1x...

CVE-2001-0429: Undefined Security Weakness

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-2001-1007

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...

CVE-2001-1006

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...

Слабое шифрование в REX 5000 Pro (weak encryption)

Возможен пароль пароля как на само устройство так и для Truesync Desktop...

CVE-2001-0429

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-2001-0080: Undefined Security Weakness

Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol mismatch error...

CVE-2001-0041: Undefined Security Weakness

Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts...

Security Advisory: Catalyst 5000 Series 802.1x Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Catalyst 5000 Series 802.1x Vulnerability ============================================================================= Revision 1.0 For Public Release 2001 April 16 at 1500 UTC...

Catalyst 5000 Series 802.1x Vulnerability

...

CVE-1999-0430: Undefined Security Weakness

Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload...

cisco.catalyst.switches.txt

Date: Wed, 24 Mar 1999 19:39:53 -0000 From: [email protected] To: [email protected] Subject: Cisco security notice: Cisco Catalyst Supervisor Remote Reload -----BEGIN PGP SIGNED MESSAGE----- Cisco Catalyst Supervisor Remote Reload Revision 1.2 For release Wednesday, March 24, 1999, 12:00 PM...