Authentication flaw

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for 1 RemMagSNMP.html, which...

Design/Logic Flaw

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...

CVE-2008-1524

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...

CVE-2008-1525

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...

Default configuration

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...

CVE-2008-1524

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...

CVE-2008-1528

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for 1 RemMagSNMP.html, which...

CVE-2008-1525

The CVE-2008-1525 entry affects ZyXEL Prestige routers (P-660/P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3). The issue is a default SNMP configuration where Trusted Host is 0.0.0.0, enabling remote attackers to send SNMP requests from any source IP address. The provided documents do not specify an...

CVE-2008-1525

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...

CVE-2008-1524

Vulnerability: CVE-2008-1524 affects ZyXEL Prestige routers (P-660, P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3). The SNMP service uses default community names: read and write access are both set to "public", enabling remote administrators actions via SNMP. Documented implications include reading...

GLSA-200803-32 : Wireshark: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200803-32 Wireshark: Denial of Service Multiple unspecified errors exist in the SCTP, SNMP, and TFTP dissectors. Impact : A remote attacker could cause a Denial of Service by sending a malformed packet. Workaround : Disable the...

CVE-2008-1503

Cross-site scripting XSS vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via 1 the name of a node object, or the 2 sysContact or 3 sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be...

CVE-2008-1503

CVE-2008-1503 affects F5 BIG-IP 9.4.3 web management interface. The vulnerability is a Cross-site Scripting (XSS) flaw exploitable via user-supplied input in the node object name, or the sysContact/sysLocation SNMP configuration fields (Audit Log XSS). The notes suggest CSRF as a possible related...

CVE-2008-1503

Cross-site scripting XSS vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via 1 the name of a node object, or the 2 sysContact or 3 sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be...

Wireshark: Denial of service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple unspecified errors exist in the SCTP, SNMP, and TFTP dissectors. Impact A remote attacker could cause a Denial of Service by sending a malformed packet. Workaround Disable the SCTP, SNMP, and TFTP...

F5 BIG-IP Web Management Audit Log XSS

F5 BIG-IP Web Management Audit Log XSS Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP web management interface contains a persistent cross-site scripting vulnerability in the audit log facility. Log entries are output raw, without being HTML-encoded first. This allows an...

Design/Logic Flaw

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

CVE-2008-1402 affects MG-SOFT Net Inspector, specifically versions up to 6.5.0.828 on Windows. The vulnerability allows remote denial of service: (1) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) and (2) via a malformed request to the Net Inspector Server (niengine). The provided conne...