CVE-2014-4870

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...

CVE-2014-4868

The CVE-2014-4868 issue affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The vulnerability is an OS command injection in the management console: remote authenticated users can inject shell metacharacters in a console command to break out of the management shell and execut...

CVE-2014-4870

CVE-2014-4870 affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The issue arises from improper input validation in /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl, enabling a non-root user to leverage the sudo configuration to gain root privileges. Connected sources ...

CVE-2014-4868

The management console on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command...

Brocade Vyatta 5400 vRouter contains multiple vulnerabilities

Overview Brocade Vyatta 5400 vRouter versions 6.4Rx, 6.6Rx, and 6.7R1 contain multiple vulnerabilities. Description Brocade Vyatta 5400 vRouter versions 6.4Rx, 6.6Rx, and 6.7R1 contain the following vulnerabilities:CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS...

Ascom COLTSOHO,Brocade Fabric OS,MatchBox,Win98/NT4,Solaris,Xyplex SNMP World Writeable Community

No description provided by source. Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source: http://www.securityfocus.com/bid/986/info In a number of networ...

Brocade Fabric OS Default Credentials

The remote device is a Brocade Fabric OS device that uses a set of known, default credentials. Knowing these, an attacker able to connect to the service can gain control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SNMP Public Community String Zero Day in Routers Disclosed

Researchers have discovered previously unreported problems in SNMP on embedded devices where devices such as secondary market home routers and a popular enterprise-grade load balancer are leaking authentication details in plain text. The data could be extracted by gaining access to the read-only...

Brocade Password Hash Enumeration

This module extracts password hashes from certain Brocade load balancer devices. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Brocade Password Hash Enumeration', 'Description' = %q This modu...

HP B-series SAN Network Advisor < 12.1.1 Remote Code Execution (Windows)

The version of HP B-series SAN Network Advisor on the remote Windows host is a version prior to 12.1.1. As such, it is affected by a remote code execution vulnerability. It should be noted that while the associated references report on a remote code execution vulnerability in EMC Connectrix Manag...

HP B-series SAN Network Advisor < 12.1.1 Remote Code Execution (Linux)

The version of HP B-series SAN Network Advisor on the remote Linux host is a version prior to 12.1.1. As such, it is affected by a remote code execution vulnerability. It should be noted that while the associated references report on a remote code execution vulnerability in EMC Connectrix Manager...

CVE-2013-7306

The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain sensitiv...

CVE-2013-7307

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...

Design/Logic Flaw

The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain sensitiv...

Design/Logic Flaw

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...

CVE-2013-7306

The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain sensitiv...

CVE-2013-7306

CVE-2013-7306: OSPF LSA processing on Brocade routers does not guard against duplicate Link State IDs in LSAs before updating the database, enabling remote users to cause routing disruption (DoS) or glean sensitive packet data via a crafted LSA. This CVE is related to CVE-2013-0149 (OSPF LSA vali...

CVE-2013-7307

The CVE-2013-7307 family concerns OSPF implementations that fail to validate duplicate Link State ID values in LSA packets, leading to possible routing disruption or information disclosure. Connected records confirm concrete products/vendors affected by related CVEs in 2013-0149: Yamaha routers, ...

CVE-2013-7307

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...

ESA-2013-089: EMC Connectrix Manager Converged Network Edition Remote Code Execution Vulnerabilities

ESA-2013-089.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-089: EMC Connectrix Manager Converged Network Edition Remote Code Execution Vulnerabilities EMC Identifier: ESA-2013-089 CVE Identifier: CVE-2013-6810 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C...