Cisco ACNS contains buffer overflow vulnerability in the authentication module when supplied an overly long password

Overview Cisco Application and Content Networking Software ACNS contains a buffer overflow that may enable an attacker to execute arbitrary code on the affected device. Description Cisco ACNS Software "...combines demand-pull caching and pre-positioning for accelerated delivery of web application...

Speedtouch 510 DOS

Speedtouch 510 ADSL Modem/FW/Router We have been attempting to run NMAP and NESSUS scans using a new ADSL cable link. Using the ADSL modem mentioned above, we found that a standard NMAP/NESSUS scan of an IP range would force the router to reboot itself after 20 seconds. Thinking this was faulty...

Moderate: Red Hat Security Advisory: : Updated SANE packages fix remote vulnerabilities

Updated SANE packages that resolve a number of vulnerabilities with the saned daemon are now available. SANE is a package for using document scanners. Sane includes a daemon program called saned that enables a single machine connected to a scanner to be used remotely. This program contains severa...

DSA-359 atari800 - buffer overflows

Bulletin has no description...

[SECURITY] [DSA-310-1] New xaos packages fix improper setuid-root execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 310-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0260

Cisco VPN 3000 Series Concentrators and Cisco VPN 3002 Hardware Client (2.x.x–3.6.7A) are affected by a DoS vulnerability caused by a flood of malformed ICMP packets, potentially degrading performance or causing a reload. The issue is triggered remotely and is documented across NVD and CERT advis...

CVE-2003-0259

The CVE-2003-0259 issue affects Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Client (2.x–3.6.7). A malformed SSH initialization packet during the initial SSH session setup could cause the device to reload, yielding a denial-of-service condition. CERT/CC and Cisco advisories...

CVE-2003-0258

CVE-2003-0258 affects Cisco VPN 3000 Series Concentrators and Cisco VPN 3002 Hardware Client (3.5.x–4.0.REL). When IPSec over TCP is enabled for a port on the concentrator, traffic forwarded on that port may be delivered to all hosts on the protected network, not only those using IPsec, enabling ...

CVE-2001-1291

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing...

CVE-2002-0848

CVE-2002-0848 affects Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier. When using RADIUS with a PAP or Challenge, the system sends the user password in cleartext in a validation retry request, enabling potential password capture by remote attackers...

CVE-2001-1291

The CVE-2001-1291 entry concerns the telnet server on 3Com PS40 SuperStack II hardware that does not delay or disconnect after incorrect username/password attempts, enabling easier brute‑force access. Connected PT-2001-2418 notes affected versions are not specified, and there is no documented fix...

CVE-2002-2371

Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service crash via a packet containing the device's hardware address as the source MAC address in the DLC header...

nCipher Advisory #6: Access control defects in PKCS#11 keys

nCipher Security Advisory No. 6 Access control defects in PKCS11 keys -------------------------------------- SUMMARY ======= As a function of internal QA testing, nCipher has identified that, under certain unusual circumstances, keys created by the nCipher PKCS11 library, which should be secure,...

[RHSA-2002:205-15] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:205-15 Issue date: 2002-09-20 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

[RHSA-2002:206-12] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:206-12 Issue date: 2002-09-23 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

Cisco Security Advisory: Cisco VPN 3000 Concentrator Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Multiple Vulnerabilities Revision 1.0 For Public Release 2002 September 03 at 1500 UTC ---------------------------------------------------------------------- Contents Summary Affected Products Detai...

Multiple bugs in different hardware

No description provided...

Microsoft Outlook Express 5.5 - Denial of Service Device Denial of Service

source: https://www.securityfocus.com/bid/4584/info A denial of service issue has been reported in Microsoft Outlook Express. Reportedly, Outlook Express does not adequately handle unusually crafted HTML mail messages. Modifying the BGSOUND or IFRAME tag to contain a URL pointing to a DOS device,...

nCipher Security Advisory #2: SNMP vulnerabilities

SUMMARY ======= SNMP agents supplied by nCipher, as well as those required to run other nCipher SNMP aupport software, could be vulnerable to buffer overflow attacks including denial of service and privilege elevation. BACKGROUND ========== nCipher supplies a range of Hardware Security Modules HS...

Zero One Tech (ZOT) P100s PrintServer and SNMP

Background: The ZOT P100s is a hardware printserver device allowing sharing of a parallel printer on a standard UTP network. It has embedded telnet, http among others and provides information via SNMP with default community read string. have not tried write yet. Problem: After connecting to the...