IBM Data ONTAP存在多个漏洞

BUGTRAQ ID: 30160 CNCAN ID：CNCAN-2008071105 IBM Data ONTAP是一套完全集成的多节点解决方案，满足高性能计算HPC的应用需求。 IBM Data ONTAP存在多个未明安全问题，目前没有任何详细漏洞细节提供。 IBM Data ONTAP 7.1 + Sun Solaris 2.6 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372...

DEBIAN-CVE-2008-0960

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

CVE-2006-3569

Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with...

CVE-2006-3569

CVE-2006-3569 affects NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2 RC1/RC2/RC3 used in IBM N-Series Filers. The vulnerability permits unauthorized users to access privileged commands via unknown vectors, likely due to incorrect capabilities assigned to the audit role. Documen...

CVE-2006-3569

Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with...

CVE-2005-3327

Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...

CVE-2005-3327

CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...

CVE-2005-3327

Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...

CVE-2004-2539

Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service panic and reboot and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID...

CVE-2004-2539

Technical details are not publicly available in the provided documents. Monitor for updates.

[Full-disclosure] Network Appliance iSCSI Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory: Network Appliance iSCSI Authentication Bypass Origin Date: Wed Aug 3 2005 Publication Date: Mon Oct 24 2005 Synopsis Unauthenticated iSCSI Initiators can bypass iSCSI authentication on NetApp Filers by manipulating the iSCSI Login...