CVE-2001-1451

Memory leak in the SNMP LAN Manager LANMAN MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service memory consumption via a large number of GET or GETNEXT requests...

CVE-2001-1451

CVE-2001-1451 describes a memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3. When the Print Spooler is not running, remote attackers can trigger a denial of service by issuing a large number of GET or GETNEXT requests, leading to memory consumption. ...

serverview 3.0 - insecure file permissions

date: 06.09.2004 author: l0om - l0om at excluded d0t org - www.excluded.org product: serverview problem: insecure file permissions version: 3.0??? serverview is a server management product from fujitsu siemens which is shipped with every PRIMERGY server. it is based on snmp an let you view and se...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2003:115)

A vulnerability in Net-SNMP versions prior to 5.0.9 could allow an existing user/community to gain access to data in MIB objects that were explicitly excluded from their view. The updated packages provide Net-SNMP version 5.0.9 which is not vulnerable to this issue and also fixes a number of othe...

Net-SNMPd Write Access SNMP-EXTEND-MIB arbitrary code execution

This exploit module exploits the SNMP write access configuration ability of SNMP-EXTEND-MIB to configure MIB extensions and lead to remote code execution. Module Options msf use exploit/linux/snmp/net/snmpdrwaccess msf undefinedsnmpdrwaccess show actions ...actions... msf undefinedsnmpdrwaccess s...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated Net-SNMP packages are available that correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MI...

Net-SNMP information leak

With knowledge of any community it's possible to gain access to all MIB objects...

CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

CVE-2002-0797

Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges...

CVE-2002-0797

CVE-2002-0797 : The vulnerability affects Solaris 5.6–8 running the MIB parsing component of mibiisa. A buffer overflow in this component may allow a remote attacker to gain root privileges. The issue is documented in NVD/Nessus references as a remote overflow potentially enabling a root shell. N...

CVE-2002-0797

Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges...

CVE-2001-1220

CVE-2001-1220 affects the D-Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The root cause is storing the administrative password in plaintext in the default Management Information Base (MIB), allowing remote attackers to gain administrative privileges. No remediation details...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications DOCSIS standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings...

Проблемы в SNMP Cisco/Olicom/3Com (ILMI SNMP community)

Неоторые MIB-группы могут быть прочитаны/изменены с исопльзованием недокументированного SNMP-community ILMI и др.. Кроме того, могут "оживать" удаленные community...

CVE-1999-1513

Management information base MIB for a 3Com SuperStack II hub running software version 2.10 contains an object identifier .1.3.6.1.4.1.43.10.4.2 that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized...