Linksys BEFSR41 information leak

DHCP reply contains random information from memory...

Linksys - DHCP Information Disclosure

Linksys - DHCP Information Disclosure // source: https://www.securityfocus.com/bid/10329/info It has been reported that the built-in DHCP server on these devices are prone to an information disclosure vulnerability. When attempting to exploit this issue, it has been reported that a denial of...

Linksys - DHCP Information Disclosure

// source: https://www.securityfocus.com/bid/10329/info It has been reported that the built-in DHCP server on these devices are prone to an information disclosure vulnerability. When attempting to exploit this issue, it has been reported that a denial of service condition may occur, stopping...

CVE-2003-1009

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...

CVE-2003-1009: Undefined Security Weakness

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...

CVE-2003-0983

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

CVE-2003-0983

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

CVE-2003-0983: Undefined Security Weakness

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

ACME-mitel.txt

There is an interesting bug in a Mitel's servers for Voice over IP that allows to discover the numbers called and the numbers calling trought this dhcp server. This server is configurable via http interface and via telnet; in this case, if there is a call at moment of login/pass request, I've not...

CVE-2003-0291

3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets...

CVE-2003-0291

3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets...

CVE-2003-0291

The CVE-2003-0291 issue affects 3com OfficeConnect Remote 812 ADSL Router v1.1.7, where memory is not properly cleared from DHCP responses. This can allow remote attackers to sniff DHCP traffic and identify contents of prior HTTP requests, revealing partial confidentiality of past traffic. The pr...

CVE-2003-0291: Undefined Security Weakness

3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets...

3COM 812 DSL information leak

DHCP response contains information from memory...

Memory leak in 3COM 812 DSL routers

Issue : Memory leak in 3COM DSL routers Affected product : OfficeConnect Remote 812 ADSL Router Affected Firware : 1.1.7 Inmune firwamre : 1.1.9 Description : 3Com develops OfficeConnect 812 DSL routers that are widely used in Spanish ADSL lines . There is a flaw in the 1.1.7 firmware that enable...

CVE-2002-0601

ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service crash via malformed DHCP packets that cause RealSecure to dereference a null pointer...

CVE-2002-0758

CVE-2002-0758 affects SuSE 8.0 where the ifup-dhcp script in the sysconfig package may process spoofed DHCP responses, allowing remote attackers to cause arbitrary commands to be stored and executed. The underlying issue is the handling of DHCP data by the script, leading to code execution on the...

CVE-2002-0601

Affected product: ISS RealSecure Network Sensor (5.x–6.5). vulnerability: processing certain DHCP traffic leads to a crash by dereferencing a null pointer, enabling remote attackers to cause a denial of service. Impact: sensor crash/DoS as described; exploitation details are not provided in the d...

CVE-2002-0758

ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file...

CVE-2002-0758: Undefined Security Weakness

ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file...