Multiple Symantec security appliances fail to properly filter port 53/udp traffic

Overview A vulnerability exists in multiple Symantec security appliances that could allow a remote attacker to bypass the firewall using a source port of 53/udp. Description Symantec's Firewall/VPN appliances and Gateway Security models include a number of services such as tftpd, snmpd, and isakm...

Symantec Firewall/VPN appliance vulnerable to DoS via UDP port scan

Overview A vulnerability in the Symantec Firewall/VPN appliance could allow an attacker to cause a denial-of-service condition. Description The Symantec Firewall/VPN appliance supports a number of services that utilize the UDP protocol including tftpd, snmpd, and isakmp. There is a vulnerability ...

[Full-Disclosure] 3COM 3crwe754g72-a Administration interface code injection (DHCP)

Title: 3COM 3crwe754g72-a Administration interface code injection Class: Design error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0001 Release Date: 2004-10-18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle...

usr8003.txt

Hello. US Robotics Broadband Router 8003 is a small home/SOHO router which is configured using a HTML interface. This interface, as usual, asks for a password in order to let you view or change configuration parameters. But the password is checked first by a javascript function that just compares...

APC SmartSlot Web/SNMP Management Card Default Password

The remote APC Smartslot Web/SNMP Management card ships with a default username and password. An attacker can use this information to access the remote APC device with any username and the factory password 'TENmanUFactOryPOWER'. C Tenable Network Security, Inc. Refs: Subject: APC 9606 SmartSlot...

CVE-2003-1346

D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager...

Cisco Aironet AP 1100 Malformed HTTP Request Crash Vulnerability

VIGILANTe Security Watch Advisory Name: Cisco Aironet AP 1100 Malformed HTTP Request Crash Vulnerability Systems Affected: Tested on a Cisco Aironet AP1100 Model 1120B Series Wireless device. Firmware version 12.24JA and earlier. Severity: High Risk Vendor URL: http://www.vigilante.com Authors:...

Various Axis products allow unauthorized remote privileged access

Overview A vulnerability in various Axis Communications products may allow unauthorized remote privileged access. Description Axis Communications Inc. produces network-enabled cameras and video servers. The company describes itself as "an innovative market leader in network video and print server...

HP JetDirect < Q.24.09 Multiple Vulnerabilities

The remote HP JetDirect is, according to its version number, vulnerable to an issue that may allow an attacker to gain unauthorized access on this printer, or crash it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11396; scriptversion"1.14"; scriptbugtraqid7070;...

Longshine WLAN Access-Point LCS-883R VU#310201

Hardware: Longshine LCS-883R-AC-B External WLAN Access Point 22 Mbps Software: ThreadX ARM7/Green Hills Version G3.0f.3.0c from Express Logic Inc. Description: Get Superuser Privileges and view the devices password and password and other passwords Versions affected: tested with 03.01.0b and...

Avaya switches contains multiple undocumented accounts allowing full administrative access to the device

Overview Multiple Avaya switches do not adequately protect privileged access. Description Avaya's P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet. --- Impact A remote attacker can...

Scan against Enterasys SSR8000 crash the system

The SSR8000 Smart Switch Router listening on tcp ports 15077 and 15078, this ports are used for MPS code. For more information about ATM MPOA Server MPS : http://www.enterasys.com/support/techtips/tk0659-9.html Sending few packets on tcp ports 15077 and 15078 against SSR8000 with firmware E8.2.0....

CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

CVE-2002-0675

The CVE affects Pingtel xpressa SIP phones (model PX-1) with software versions 1.2.5–1.2.7.4. The root cause is that firmware upgrades can be performed without administrative privileges, enabling an unauthorized user to upgrade the phone. The accompanying @stake advisory details multiple vulnerab...

CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

CVE-2002-0675: Undefined Security Weakness

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

Foundry DoS at login prompt

In the release notes for Foundry code v07.1.09, I noticed the statement: If you entered a very long string when prompted for a Telnet password, then pressed Enter before the software timed out the access attempt, the device reset. This functions exactly as it describes on FastIrons, BigIrons, and...

Adtran DoS

Hi Gang, While testing some new gear, I found a serious problem with the Adtran MX2800 M13 Multiplexer. This device aggregates up to 28 T1's onto a Channelized DS3 interface and is primarlly used in cases where you've got a lot of T1's. The unit I have has dual redundant controller cards so I don...

Ascend MAX / Pipeline Router Discard Port Malformed Packet DoS

It was possible to make the remote Ascend router reboot by sending it a UDP packet containg special data on port 9 discard. An attacker may use this flaw to make your router crash continuously, preventing your network from working properly. C Tenable Network Security, Inc. include"compat.inc"; if...