CVE-2001-1520

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...

AIX 5.1/5.2/5.3 local root exploits

hi, i found some local security holes in IBM's AIX versions 5.1, 5.2 and 5.3 unix for IBM RS/6000 powerpc. 1 the first is a bug in all setuid diag related tools that use an environment variable as a prefix to an external binary executed as root. 2 the second is a classical stack overflow in a too...

Cisco 6000/6500/7600 series systems fail to properly process layer 2 frames

Overview Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 MSFC2 fail to properly process layer 2 frames. Description Cisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted...

CVE-2004-0244

Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or Optical Services Module (OSM) are affected by a crafted layer-2 frame vulnerability. A layer-2 frame that encapsulates a layer-3 packet with inconsistent length can cause the device to freeze or res...

Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Revision 1.0 - FINAL For Public Release 2004 February 03 1600 UTC GMT - ---------------------------------------------------------------------------- Contents Summary...

CVE-2001-1520

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...

CVE-1999-1151

CVE-1999-1151 affects the Compaq/Microcom 6000 Access Integrator. The issue is that the device does not time out sessions after prompting for credentials, enabling remote parties to cause a denial of service by connecting without providing a username or password. The provided documents do not spe...

CVE-1999-1196

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

CVE-1999-1152

The CVE-1999-1152 entry concerns Compaq/Microcom 6000 Access Integrator. Affected component: the authentication handling in the 6000 Access Integrator where, after a certain number of failed login attempts, the system does not disconnect the client. This behavior enables remote attackers to perfo...

CVE-1999-1151

Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password...

CVE-1999-1196

CVE-1999-1196 affects Hummingbird Exceed X version 5. Remote denial of service can be triggered by malformed data sent to port 6000. This is documented across multiple sources (NVD/NIST and CVE list). The connected OpenVAS/Nessus entries reiterate a remote crash/vector via arbitrary data, but do ...

CVE-2000-0453

XFree86 3.3.x and 4.0 are affected by a DoS due to a negative counter value in a malformed TCP packet sent to port 6000. The root cause is a malformed/negative counter handling in the TCP processing. Practical impact is denial of service as described; no exploitation details are provided in the d...

Nasty XFree Xserver DoS

Hi, Here's a very interesting DoS which I discovered against XFree86-3.3.5. I've had confirmation it also affects 3.3.6 and 4.0 with a small difference, see below SUMMARY ======= Remote users can, by sending a malformed packet to port 6000 TCP, cause a victim X server to freeze for a couple of...

CVE-1999-1196

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

PT-1998-1157 · Compaq/Microcom · Compaq/Microcom 6000 Access Integrator

Name of the Vulnerable Software and Affected Versions: Compaq/Microcom 6000 Access Integrator affected versions not specified Description: The issue allows remote attackers to guess usernames or passwords via a brute force attack because the system does not disconnect a client after a certain...