AVAYA Cajun unauthorized access

Undocumented read/write SNMP community NoGaH$@!. Undocumented accounts diag/danger and manuf/xxyyzz...

ECHU Alert #3 : Meunity 1.1 script injection vulnerability

---------------------------------------------- | Meunity 1.1 script injection vulnerability | ---------------------------------------------- PROGRAM: Meunity Community System VULNERABLE VERSIONS: all IMMUNE VERSIONS: none SEVERITY: really high Tested version ============== Meunity Community Syste...

iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability 20:00 GMT, October 2, 2002 I. BACKGROUND The Net-SNMP package, formerly known as ucd-snmp, is a suite of tools relating to the Simple Network Management Protocol SNMP. It includes an...

Xoops RC3 script injection vulnerability

-------------------------------------------- | Xoops RC3 script injection vulnerability | -------------------------------------------- PROGRAM: Xoops VENDOR: http://www.xoops.org/ VULNERABLE VERSIONS: RC3.0.4,possibly previous versions IMMUNE VERSIONS: no immune current versions SEVERITY: high...

CVE-2002-0478

The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings...

CVE-2002-0812

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the...

CVE-2002-0812

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the...

Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration

Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration source: https://www.securityfocus.com/bid/5436/info Orinoco is the manufacturer of various wireless network components, including access points and network cards. It is possible to remotely gain access to the...

The SUPER Bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / SAVE DEFCON..HELP GOBBLES..SAVE DEFCON..HELP GOBBLES When GOBBLES say he and he security team are non-profit. He really mean NON-profit. This means GOBBLES and he GOBBLES Security Labs GSL friends do not have much funds. GOBBLES was hoping to receiv...

CVE-2002-0540

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2001-0888: Undefined Security Weakness

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2002-0540

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...

CVE-2002-0478

CVE-2002-0478 concerns Foundry Networks EdgeIron 4802F. The default configuration allows remote attackers to modify sensitive information via arbitrary SNMP community strings. The root cause is the use of default, potentially insecure SNMP community strings that enable unauthorized write access t...

CVE-2002-0478

The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings...

CVE-2002-0540

The CVE-2002-0540 issue affects Nortel CVX 1800, where the device is deployed with a default SNMP community string (public). A specially crafted SNMP walk can disclose administrator usernames and passwords and allow modification of CVX configuration, enabling partially read and write access to se...

CVE-2002-0540: Undefined Security Weakness

Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...

CVE-2002-0223

Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension...

Update and comments on the MS02-023 patch, holes still remain

The latest cumulative patch from Microsoft, http://www.microsoft.com/technet/security/bulletin/MS02-023.asp , promises to eliminate "six newly discovered vulnerabilities", but fails to do so. First, we find what MS calls "A cross-site scripting vulnerability in a Local HTML Resource". This is...

Nortel Networks CVX 1800 discloses privileged information

Overview The Nortel Networks CVX 1800 Multi-Service Access Switch discloses privileged information. Description The CVX 1800 Multi-Service Access Switch is a large modem bank typically used by large carriers and ISP's. When the CVX 1800 is queried with a specially crafted snmpwalk, it will respon...