SMC 2652W Access Point DoS Vulnerability (Nov 2005)

The remote SMC 2652W Access point web server crashes when sent a specially formatted HTTP request. SPDX-FileCopyrightText: 2002 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2001-1479

Sun Management Center (SMC) 2.0 on Solaris 8 is affected. A local user can delete arbitrary files by exploiting a symlink on /tmp/smc$SMC_PORT, as described in CVE-2001-1479. The issue enables LOCAL access with low complexity and partial integrity impact; no remediation details are provided in th...

CVE-2004-1976

The CVE-2004-1976 entry concerns SMC Barricade broadband routers (models 7008ABR and 7004VBR). The described vulnerability is that remote administration is enabled by default, allowing remote attackers to gain access by connecting to port 1900. The available documents confirm the affected devices...

CVE-2004-1976

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900...

CVE-2004-1685

The CVE-2004-1685 issue affects SMC routers: SMC7004VWBR (firmware 1.00.014) and SMC7008ABR EU (firmware 1.42.003). Root cause: authentication bypass by a remote attacker who connects from the same IP address as the administrator currently logged in, then accesses setup_status.htm or status.HTM. ...

CVE-2004-1685

SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setupstatus.htm or status.HTM pages...

CVE-2005-0248

The CVE-2005-0248 issue affects the Solaris Management Console (SMC) GUI on Solaris 8 and 9. When creating user accounts configured for password aging, the GUI creates accounts with a blank password. This allows remote or local attackers to break into those accounts. The available documents do no...

CVE-2004-1354

CVE-2004-1354 affects the Solaris Management Console (SMC) in Sun Solaris 8 and 9. The issue arises because SMC generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive informa...

[SA13803] Sun SMC GUI Account With Empty Password Creation Security Issue

TITLE: Sun SMC GUI Account With Empty Password Creation Security Issue SECUNIA ADVISORY ID: SA13803 VERIFY ADVISORY: http://secunia.com/advisories/13803/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun...

CVE-2004-1685

SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setupstatus.htm or status.HTM pages...

SMC routers unauthorized access

Administration web interface TCP/1900 is available from WAN without authentication...

[NEWS] SMC Routers Passwordless Remote Administration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SMCwhoops.txt

Tested Model: 7008ABR part number 750.9814 with firmware 1.032 installed Confirmed by another person on: 7004VBR version 1, firmware 1.231 Others may be vulnerable. SMC broadband routers ship with remote administration enabled by default on their port 1900 on the WAN side of the router. If you ju...

CVE-2004-1976

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900...

smc2404WBR.txt

From: To: [email protected] Subject: SMC Router Denial of Service exploit Howdy, Tested on an SMC2404WBR - BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. Sending a stream of UDP random packets to multiple ports 0-65000 on the router will cause the router to freeze until ...

SMC Router 1.2x - Random UDP Packet Denial of Service

source: https://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets randomly to ports 0-65000. The SMC7004VWBR router is als...

SMC Router 1.2x - Random UDP Packet Denial of Service

SMC Router 1.2x - Random UDP Packet Denial of Service source: https://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets...

CVE-2003-0419

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface...

CVE-2003-0419

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface...

CVE-2003-0419

CVE-2003-0419 affects SMC Networks’ Barricade Wireless Cable/DSL Broadband Router, model SMC7004VWBR. The vulnerability allows a remote attacker to crash the device by sending a specially formatted series of packets to TCP/ PPTP port 1723 on the internal interface, rendering the router unresponsi...