Preemptive Protection against Castle Rock Computing SNMPc Network Manager Community String Stack Vulnerability

A buffer overflow vulnerability has been discovered in Castle Rock Computing SNMPc Network Manager. Castle Rock Computing SNMPc is a secure distributed network management system that uses the Simple Network Management Protocol SNMP to communicate with other networks. A remote attacker may exploit...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

Stack overflow

Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet...

CVE-2008-2214

Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet...

CVE-2008-2214

Castle Rock Computing SNMPc Network Manager is affected by a stack-based buffer overflow when a long SNMP TRAP community string is sent. The vulnerability exists in SNMPc 7.1 and earlier and can allow remote attackers to crash the service or run arbitrary code (often with SYSTEM-level privileges)...

CVE-2008-2214

Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet...

HP OpenView网络节点管理器ovspmd远程堆溢出漏洞

BUGTRAQ ID: 28689 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OV NNM的ovspmd服务实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OV NNM的ovspmd服务运行在TCP 8886端口上，该服务检查长度值是否低于9216字节（目标缓冲区的大小）以防范缓冲区溢出，但这是一个有符比较，因此使用0x80000000和0x80000003之间的负数值就可以触发堆溢出，导致执行任意指令。 HP OpenView Network Node Manager = 7.53 HP -...

Design/Logic Flaw

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

Buffer overflow

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1321

The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service service termination via the exit command to TCP port 6162, or have other impacts via other commands...

CVE-2008-1320

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1322

The CVE-2008-1322 issue affects ASG-Sentry Network Manager, specifically the File Check Utility (fcheck.exe) bundled with versions up to 7.0.0. The connected Nessus entry documents that fcheck.exe fails to sanitize input when creating index files, allowing an unauthenticated remote attacker to ov...

CVE-2008-1320

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1320

ASG-Sentry Network Manager version 7.0.0 and earlier is affected by multiple buffer overflows in FxIAList (TCP 6162) and FxAgent SNMP with a long community string (UDP 6161). The underlying issue is buffer overflows, allowing remote attackers to execute arbitrary code or trigger a denial of servi...

CVE-2008-1321

The CVE describes a vulnerability in the FxIAList service of ASG-Sentry Network Manager 7.0.0 and earlier . The affected component is the FxIAList service ; the root cause is an authentication-involved condition that allows remote attackers to trigger a denial of service (service termination) by ...