Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей Linux

No description provided...

aix-snmp.txt

Following on from Michael Zalewski's recent SNMP post, here's an issue i noted on two AIX systems. NOTE: This was seen on both AIX 4.3 and 4.2. It appears that on the above releases of AIX, the SNMP daemon is enabled by default and two community names are enabled with read/write privileges. The...

snmp.writable.txt

Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...

CVE-2000-0147

The CVE-2000-0147 issue affects snmpd on SCO OpenServer, where the SNMP community string is writable by default. This enables local attackers to modify the host’s configuration. Connected sources corroborate the default-write vulnerability but do not provide a patch or explicit remediation details.

Ascom COLTSOHO / Brocade Fabric OS / MatchBox / Win98/NT4 / Solaris / Xyplex - SNMP World Writeable Community

Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source: https://www.securityfocus.com/bid/986/info In a number of network devices/operating systems, some...

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-1999-0517

An SNMP community name is the default e.g. public, null, or missing...

CVE-1999-0517

An SNMP community name is the default e.g. public, null, or missing...

CVE-1999-0792

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration...

CVE-1999-0516

An SNMP community name is guessable...

CVE-1999-0517

CVE-1999-0517 identifies an SNMP flaw where the community string is default (public), null, or missing. This enables remote SNMP access to the device, with potential exposure of SNMP data and management actions. The vulnerability is reflected across various advisories and scanners (including F5 B...

CVE-1999-0516

CVE-1999-0516 concerns SNMP where the community name is guessable. The provided materials indicate SNMP default/community names (e.g., public) and show Metasploit modules that probe/login using common community strings. The CVSS data in the entry implies network access with low complexity and no ...

CVE-1999-0186

In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters...

CVE-1999-0472

The CVE-1999-0472 entry describes a vulnerability in NetApps C630 Netcache where the SNMP default community name "public" is not properly removed even if disabled. This can lead to information disclosure (confidentiality impact) per the CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:N/A:N) with a bas...

CVE-1999-1513

Management information base MIB for a 3Com SuperStack II hub running software version 2.10 contains an object identifier .1.3.6.1.4.1.43.10.4.2 that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized...

netcache.snmp.public.txt

Date: Wed, 7 Apr 1999 08:43:40 +0200 From: Marco Davids To: [email protected] Subject: Netcache snmp behaviour Hi, We noticed an unexpected behaviour on our NetApps C630 Netcache's. The problem even seems to exist in the latest software- release 3.3.1. The problem concerns the SNMP default...

xylan.omniswitch.txt

Date: Wed, 31 Mar 1999 19:12:20 +0000 From: [email protected] To: [email protected] Subject: Xylan OmniSwitch "features" Sorry if this is already known. Stepped into two "features" of Xylan OmniSwitches also works on Pizza. These switches are sold OEM to Alcatel which just bought Xylan and IBM...

irix.x.server.font.bof.txt

Date: Mon, 8 Mar 1999 23:06:08 GMT From: SGI Security Coordinator Reply-To: [email protected] To: [email protected] Subject: X server font path buffer overflow vulnerability -----BEGIN PGP SIGNED MESSAGE----- Silicon Graphics Inc. Security Advisory Title: X server font path buffer overflow...