[security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01422487 Version: 1 HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors iLO-2 MP, Denial of Service DoS NOTICE: The information in this Security Bulletin should be act...

JVN#13159997 Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication

The authentication for the web administration interface for the WN-APG/R-Series and WN-WAPG/R-Series wireless LAN routers from I-O DATA DEVICE is disabled in the default configuration. This vulnerability may allow a remote attacker to access the web administration interface without authentication...

Henri Lindberg - Smilehouse Oy

Louhi Networks Security Advisory Advisory: Checkpoint VPN-1 UTM Edge cross-site scripting Release Date: 2008/03/06 Last Modified: 2008/03/06 Authors: Henri Lindberg, Associate of ISC [email protected] Application: Checkpoint VPN-1 Edge W Embedded NGX 7.0.48x patched in version 7.5.48 Device...

JVN#88575577 Multiple Yamaha routers vulnerable to cross-site request forgery

Multiple Yamaha routers provide a web-based interface for users to configure the settings of the routers. The web interface is vulnerable to cross-site request forgery. Impact If the administrator views a malicious website while logged onto the web interface, the password and other configuration...

Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability

VULNERABILITY: Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability AUTHOR: DarkFig gmdarkfig at gmail dot com http://acid-root.new.fr/?0:17 [email protected] INTRODUCTION: I recently bought this router for my local network without modem integrated, now I can...

Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass

VULNERABILITY: Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability AUTHOR: DarkFig http://acid-root.new.fr/?0:17 [email protected] INTRODUCTION: I recently bought this router for my local network without modem integrated, now I can tell that it was a bad choic...

Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass

Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass VULNERABILITY: Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability AUTHOR: DarkFig http://acid-root.new.fr/?0:17 [email protected] INTRODUCTION: I recently bought this router for my local...

PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page

Date Found: 17th July 2007 Vendor informed: 23rd July 2007 Confirmed by vendor: 13th September 2007 Description: Aruba 800 is vulnerable to a persistent XSS on the administrator login screen. An unauthenticated user can re-write the hidden parameter 'url' by requesting a link under the /screens/...

ProCheckUp Security Advisory 2007.26

Date Found: 17th July 2007 Vendor informed: 23rd July 2007 Confirmed by vendor: 13th September 2007 Description: Aruba 800 is vulnerable to a persistent XSS on the administrator login screen. An unauthenticated user can re-write the hidden parameter 'url' by requesting a link under the /screens/...

HPSBPI02263 SSRT3512 rev.2 - Re-release of HPSBMI0002 HP Jetdirect, Remote Unauthorized Access, Denial of Service (DoS)

Potential Security Impact Remote unauthorized access, Denial of Service DoS VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP Jetdirect. The vulnerability could be exploited to allow remote unauthorized access or to create a Denial of Service DoS. RESOLUTION HP...

HPSBPI02265 SSRT3515 rev.2 - Re-release of HPSBMI00004 HP Jetdirect Running ftp, Advisory

Potential Security Impact Advisory VULNERABILITY SUMMARY Some security scanners generate warnings that the Jetdirect ftp directory is writable. RESOLUTION To restrict printing or suppress the security scanners warning, the ftp service can be disabled. To disable ftp, telnet to the Jetdirect devic...

TippingPoint detection bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-Advisory3ComTippingPointIPSDetectionBypass2.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: TippingPoint detection bypass...

Default credentials

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

The CVE-2007-2387 entry concerns Apple Xserve Lights-Out Management on Intel hardware prior to Firmware Update 1.0. The vulnerability is that IPMI remote access does not require a password, enabling an attacker to gain administrative access via remote requests using ipmitool. Impact is described ...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-0734

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...

CVE-2007-0734

CVE-2007-0734 affects the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n and Apple Mac OS X 10.3.9–10.4.9. The fsck component does not properly enforce password protection of a USB hard drive, allowing context-dependent attackers to list arbitrary directories or execute arb...

IP3 NetAccess < 4.1.9.6 - Arbitrary File Disclosure

I - TITLE Security advisory: Arbitrary file disclosure vulnerability in IP3 NetAccess leads to full system compromise II - SUMMARY Description: Arbitrary file disclosure vulnerability in IP3 NetAccess leads to full system compromise Author: Sebastian Wolfgarten sebastian at wolfgarten dot com Dat...

NeoScale Systems CryptoStor 700 series appliances fail to properly perform two-factor authentication

Overview NeoScale Systems CryptoStor 700 series appliances fail to properly perform two-factor authentication. This can make it easier to bypass the CryptoStor authentication process. Description NeoScale Systems CryptoStor Tape units are tape backup encryption appliances. CryptoStor 700 series...