PT-2004-1727 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.15 through 0.10.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a process crash. This can be achieved via a malformed or missing community string, which causes an out-of-bounds...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base communi...

Avaya Argent Office uses weak SNMP authentication mechanism

Overview The Avaya Argent Office does not properly enforce SNMP community string values, resulting in a weakened access control mechanism. Description The Avaya Argent Office does not properly enforce SNMP community string values. It will accept a null string i.e. as a valid community string and...

CVE-2002-1555

Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2002-1555

Cisco ONS CVE-2002-1555 affects Cisco ONS15454 and ONS15327 running ONS before 3.4, where a default, unchangeable SNMP public community string allows remote attackers to obtain sensitive information. The provided documents do not include a remediation or patch details; upgrade/mitigation specific...

CVE-2002-1555: Undefined Security Weakness

Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information...

Nokia SGSN (DX200 Based Network Element) SNMP issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia SGSN DX200 Based Network Element SNMP issue Release Date: 03/13/2003 Application: Nokia SGSN DX200 Based Network Element Platform: DX200 Severity: An attacker is able to read SNMP...

iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability 20:00 GMT, October 2, 2002 I. BACKGROUND The Net-SNMP package, formerly known as ucd-snmp, is a suite of tools relating to the Simple Network Management Protocol SNMP. It includes an...

CVE-2002-0812

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the...

CVE-2002-0812

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the...

Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration

Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration source: https://www.securityfocus.com/bid/5436/info Orinoco is the manufacturer of various wireless network components, including access points and network cards. It is possible to remotely gain access to the...

CVE-2002-0540

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2001-0888: Undefined Security Weakness

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2002-0540

The CVE-2002-0540 issue affects Nortel CVX 1800, where the device is deployed with a default SNMP community string (public). A specially crafted SNMP walk can disclose administrator usernames and passwords and allow modification of CVX configuration, enabling partially read and write access to se...

CVE-2002-0540

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...

CVE-2002-0478

CVE-2002-0478 concerns Foundry Networks EdgeIron 4802F. The default configuration allows remote attackers to modify sensitive information via arbitrary SNMP community strings. The root cause is the use of default, potentially insecure SNMP community strings that enable unauthorized write access t...

CVE-2002-0540: Undefined Security Weakness

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...

Nortel Networks CVX 1800 discloses privileged information

Overview The Nortel Networks CVX 1800 Multi-Service Access Switch discloses privileged information. Description The CVX 1800 Multi-Service Access Switch is a large modem bank typically used by large carriers and ISP's. When the CVX 1800 is queried with a specially crafted snmpwalk, it will respon...

CVE-2001-1262

Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string...