CVE-2008-3807

Cisco uBR10012 series devices running IOS with linecard redundancy expose SNMP read/write access by default using the community string private, allowing an attacker to gain complete control. The vulnerability stems from SNMP being enabled alongside linecard redundancy without access restrictions....

Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl observer = 0.3.2.1 Remote Command Execution Script: "Observer is an autodiscovering...

Cisco uBR10012路由器默认SNMP公共串漏洞

BUGTRAQ ID: 31355 CVE ID: CVE-2008-3807 CNCVE ID：CNCVE-20083807 Cisco uBR10012是一款通用宽带路由器。 Cisco uBR10012路由器存在默认SNMP公共串，远程攻击者可以利用漏洞完全控制此类型设备。 当配置线路卡冗余时Cisco uBR10012系列设备需要与RF交换机通信，这个通信基于SNMP，当线路卡冗余在Cisco uBR10012系列设备上启用时，SNMP也自动启用默认的私有公共串来提供读写权力，由于对这个公共串没有任何访问限制，可导致攻击者完全控制设备。 此Cisco Bug...

observer-exec.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl observer $output"; ... Bug2: ./observer-0.3.2.1/html/netcmd.php ... switch $GETcmd case 'whois': $output = /usr/bin/whois $GETquery...

Cisco uBR10012 Series Devices SNMP Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Gentoo Security Advisory GLSA 200410-15 (squid)

The remote host is missing updates announced in advisory GLSA 200410-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200808-02 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200808-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200505-18 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200505-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200509-05 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200509-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200505-18 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200505-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200509-05 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200509-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-31 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200711-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities ================================================================== :::::::-. ... ::::::. :::. ;;, ';, ;;...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl observer $output"; ... Bug2: ./observer-0.3.2.1/html/netcmd.ph...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl observer $output"; ... Bug2: ./observer-0.3.2.1/html/netcmd.php ... switch $GETcmd case 'whois': $output = /usr/bin/whois $GETquery...

Gentoo Security Advisory GLSA 200808-02 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200808-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200410-15 (squid)

The remote host is missing updates announced in advisory GLSA 200410-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200711-31 (net-snmp)

The remote host is missing updates announced in advisory GLSA 200711-31. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MicroTik RouterOS <= 3.13 SNMP write (Set request) PoC

No description provided by source. / -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ .0x48k...

MicroTik RouterOS SNMP安全绕过漏洞

BUGTRAQ ID: 31025 CNCAN ID：CNCAN-2008090606 MicroTik RouterOS是一款将标准的PC变为网络路由器使用的解决方案。 MicroTik RouterOS不正确处理SNMP请求，远程攻击者可以利用漏洞绕过安全限制，更改NMS中的部分配置。 MicroTik RouterOS 2.9.51 MicroTik RouterOS 2.9.50 MicroTik RouterOS 2.9.49 MicroTik RouterOS 2.9.48 MicroTik RouterOS 2.9.47 MicroTik RouterOS 2.9.46...