Очередной обзор новостей Linux

No description provided...

NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

Дырка в маршрутизаторе Netopia

Локальный ползователь может сменить SNMP community...

Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей Linux

No description provided...

aix-snmp.txt

Following on from Michael Zalewski's recent SNMP post, here's an issue i noted on two AIX systems. NOTE: This was seen on both AIX 4.3 and 4.2. It appears that on the above releases of AIX, the SNMP daemon is enabled by default and two community names are enabled with read/write privileges. The...

snmp.writable.txt

Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...

CVE-2000-0147

The CVE-2000-0147 issue affects snmpd on SCO OpenServer, where the SNMP community string is writable by default. This enables local attackers to modify the host’s configuration. Connected sources corroborate the default-write vulnerability but do not provide a patch or explicit remediation details.

Ascom COLTSOHO / Brocade Fabric OS / MatchBox / Win98/NT4 / Solaris / Xyplex - SNMP World Writeable Community

Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source: https://www.securityfocus.com/bid/986/info In a number of network devices/operating systems, some...

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-1999-0517

An SNMP community name is the default e.g. public, null, or missing...

CVE-1999-0792

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration...

CVE-1999-0517

An SNMP community name is the default e.g. public, null, or missing...

CVE-1999-0516

An SNMP community name is guessable...

CVE-1999-0517

CVE-1999-0517 identifies an SNMP flaw where the community string is default (public), null, or missing. This enables remote SNMP access to the device, with potential exposure of SNMP data and management actions. The vulnerability is reflected across various advisories and scanners (including F5 B...

CVE-1999-0516

CVE-1999-0516 concerns SNMP where the community name is guessable. The provided materials indicate SNMP default/community names (e.g., public) and show Metasploit modules that probe/login using common community strings. The CVSS data in the entry implies network access with low complexity and no ...

CVE-1999-0186

In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters...

CVE-1999-0472

The CVE-1999-0472 entry describes a vulnerability in NetApps C630 Netcache where the SNMP default community name "public" is not properly removed even if disabled. This can lead to information disclosure (confidentiality impact) per the CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:N/A:N) with a bas...