CVE-2008-3349

CVE-2008-3349 concerns multiple unspecified vulnerabilities in NetApp Data ONTAP (used on NetApp and IBM eServer platforms) that allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably due to insufficient access con...

NetApp Data ONTAP contains multiple vulnerabilities

Overview NetApp Data ONTAP contains multiple vulnerabilities. The most severe of these vulnerabilities may allow an attacker to execute commands, view sensitive data, or cause a system to crash. Description NetApp Data ONTAP contains multiple undisclosed vulnerabilities. --- Impact A remote,...

Code injection

Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors...

CVE-2008-3160

Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors...

CVE-2008-3160

Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors...

CVE-2008-3160

IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and N series Gateway, has multiple unspecified vulnerabilities with unknown impact and attack vectors. The CVE entry does not specify affected subcomponents, exact root causes, or concrete exploitation details in the pr...

IBM Data ONTAP存在多个漏洞

BUGTRAQ ID: 30160 CNCAN ID：CNCAN-2008071105 IBM Data ONTAP是一套完全集成的多节点解决方案，满足高性能计算HPC的应用需求。 IBM Data ONTAP存在多个未明安全问题，目前没有任何详细漏洞细节提供。 IBM Data ONTAP 7.1 + Sun Solaris 2.6 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372...

DEBIAN-CVE-2008-0960

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

CVE-2006-3569

Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with...

CVE-2006-3569

CVE-2006-3569 affects NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2 RC1/RC2/RC3 used in IBM N-Series Filers. The vulnerability permits unauthorized users to access privileged commands via unknown vectors, likely due to incorrect capabilities assigned to the audit role. Documen...

CVE-2006-3569

Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with...

CVE-2005-3327

Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...

CVE-2005-3327

CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...

CVE-2005-3327

Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...

CVE-2004-2539

Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service panic and reboot and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID...

CVE-2004-2539

Technical details are not publicly available in the provided documents. Monitor for updates.

[Full-disclosure] Network Appliance iSCSI Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory: Network Appliance iSCSI Authentication Bypass Origin Date: Wed Aug 3 2005 Publication Date: Mon Oct 24 2005 Synopsis Unauthenticated iSCSI Initiators can bypass iSCSI authentication on NetApp Filers by manipulating the iSCSI Login...