939 matches found
Moderate: Red Hat Security Advisory: : Updated Net-SNMP packages fix security and other bugs
Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...
security flaw
Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service crash via certain malformed 1 ISAKMP or 2 MEGACO packets...
CVE-2002-2264
Unspecified vulnerability in Internet Group Management Protocol IGMP of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain...
CVE-2002-2185
The Internet Group Management Protocol IGMP allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from...
PT-2002-2279 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.7 and earlier Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors. This could be related to...
[Security bulletin] SSRT2266 HP Tru64 UNIX IGMP Potential (DoS) Security Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN: SSRT2266 HP Tru64 UNIX IGMP Potential DoS Security Vulnerability REVISION: 0 NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: 13 November 2002 SEVERITY:...
security flaw
Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...
security flaw
Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...
CERT Advisory CA-2002-03 Multiple Vulnerabilities in Many Implementations
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-03: Multiple Vulnerabilities in Many Implementations of the Simple Network Management Protocol SNMP Original release date: February 12, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file...
ROTOS Remote SNMP Attack Tool
Internet Security Systems Security Alert February 12, 2002 PROTOS Remote SNMP Attack Tool Synopsis: ISS X-Force has learned of a powerful SNMP Simple Network Management Protocol attack tool that may be circulating in the computer underground. The PROTOS SNMP stress-testing tool sends thousands of...
PT-2001-1070
Name of the Vulnerable Software and Affected Versions ucd-snmp versions 4.2.3 ucd-snmp-utils version 4.2.3 ucd-snmp-devel version 4.2.3 Description The issue concerns multiple vulnerabilities in SNMP implementations, which can be exploited remotely to cause a denial of service or gain privileges...
CVE-2000-0980
NMPI Name Management Protocol on IPX listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network...
Remotely exploitable buffer overflow in NAI's Distributed Sniffer Agent
Bugtraq. This 'advisory' details a number of problems with NAI's sniffer product. They have fixed the problems in current versions on the sly so I have foregone notifying the vendor. They saw fit to post an advisory on Microsoft's Netmon today so 'all is fair in love and war' at least MS had the...
CVE-1999-0615
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...
PT-1998-1045 · Hewlett Packard · Hp Openview
Name of the Vulnerable Software and Affected Versions: HP OpenView affected versions not specified Description: A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. Recommendations: At the moment, there is no information abou...
PT-1998-1097 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves an SNMP community name that is guessable. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-1999-1581
Memory leak in Simple Network Management Protocol SNMP agent snmp.exe for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service memory consumption via a large number of SNMP packets with Object Identifiers OIDs that cannot be decoded...
PT-1997-1122 · Microsoft · Wins
Name of the Vulnerable Software and Affected Versions: WINS affected versions not specified Description: The issue allows all records in a WINS database to be deleted through SNMP, resulting in a denial of service. Recommendations: At the moment, there is no information about a newer version that...