IRIX IGMP vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX IGMP vulnerability Number: 20011001-01-P Date: October 22, 2001 Reference: CVE Pending Advisory will be updated upon receipt of CVE SGI provides this information freely to the SGI user community for its consideration,...

CVE-1999-1513

CVE-1999-1513 affects a 3Com SuperStack II hub running software version 2.10. The vulnerability centers on a read-only MIB object (.1.3.6.1.4.1.43.10.4.2) that exposes the entire table of community strings, potentially enabling unauthorized activities. The available public description confirms th...

CVE-1999-1245

The CVE-1999-1245 entry concerns vacm ucd-snmp SNMP server (version 3.52) that fails to disable access to the public community string, enabling potential remote information disclosure. Described impact is partial confidentiality loss with network access and no integrity/availability impact stated...

CVE-1999-1245

vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information...

CVE-2001-0711

Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface ILMI SNMP community string...

CVE-1999-1527: Undefined Security Weakness

Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server...

CVE-1999-1513: Undefined Security Weakness

Management information base MIB for a 3Com SuperStack II hub running software version 2.10 contains an object identifier .1.3.6.1.4.1.43.10.4.2 that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized...

CVE-2001-0711: Undefined Security Weakness

Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface ILMI SNMP community string...

CVE-2001-0380

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'...

Cisco CatOS VACM read-write Community String Device Configuration Manipulation

It is possible to obtain the remote private community strings using the View-Based Access Control MIB VACM of the remote Cisco router. An attacker may use this flaw to gain read/write SNMP access on this router. Note that a value in this table does not necessarily mean that an instance with the...

CVE-2001-0380

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'...

undocumented 3Com Netbuilder II SNMP ILMI commnity

WWW.PLAZASITE.COM Systems & Security Division Title: 3Com Netbuilder II SNMP ILMI Community Date: 15-5-2001 Platform: Only tested Netbuilder II routers Author: Juan Manuel Pascual [email protected] Status: Vendor Contacted but no answers received OVERVIEW: It seems to exist an undocumented...

Multiple networking devices allow SNMP objects to be viewed/modified via ILMI community string

Overview There is a vulnerability in the remote management architecture for Asynchronous Transfer Mode ATM networking devices that permits unauthorized access to configuration information. An attacker who gains access to an affected device can read and modify its configuration, creating a...

Cisco IOS creates SNMP read-only community string

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read its configuration, creating an information leak. Description Certain versions of the Cisco...

ILMI community in olicom/crosscomm routers

Crosscomm/Olicom routers have a undocumented community string ILMI yes, the same as in cisco : that has read and write permissions i didn't check the whole tree, but you can set system.sysContact.0 for example. This was checked on a XLT-F router with software 'XL 80 IM Version 5.5 Build Level 2'...

Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String

Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String source: https://www.securityfocus.com/bid/2802/info Olicom routers were previously manufactured and distributed by Olicom, a company now owned by Intel. Olicom routers provide a low-cost routing solution for small businesses. A problem...

Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String

source: https://www.securityfocus.com/bid/2802/info Olicom routers were previously manufactured and distributed by Olicom, a company now owned by Intel. Olicom routers provide a low-cost routing solution for small businesses. A problem with Olicom routers could allow unauthorized access to certai...

Cisco Security Advisory: Cisco IOS Software Multiple SNMP Community String Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco IOS Software Multiple SNMP Community String Vulnerabilities Revision 1.0: INTERIM For Public Release 2001 February 28 11:00 US/Eastern UTC+0500 ------------------------------------------------------------------------ Summary Multip...

Cisco IOS Software Multiple SNMP Community String Vulnerabilities

...

CVE-2001-1434

Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...