ZyXel Prestige routers multiple security vulnerabilities

Crossite scripting, crossite request spoofing, privilege escalation, unauthorized SNMP access, information leak...

ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf

This paper is the result of various security assessments performed on several ZyXEL Prestige devices in both, a controlled environment computer lab and production environments during several penetration tests. There are two types of attacks featured in this paper which we believe might be...

[SECURITY] Fedora 7 Update: cacti-0.8.7b-1.fc7

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 8 Update: cacti-0.8.7b-1.fc8

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

Debian: Security Advisory (DSA-1483-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1483-1 (net-snmp)

The remote host is missing an update to net-snmp announced via advisory DSA 1483-1. OpenVAS Vulnerability Test $Id: deb14831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1483-1 net-snmp Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0680

SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service daemon crash via a crafted SNMP SET request...

Cross site request forgery (csrf)

SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service daemon crash via a crafted SNMP SET request...

CVE-2008-0680

SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service daemon crash via a crafted SNMP SET request...

Debian DSA-1483-1 : net-snmp - design error

The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

MikroTik RouterOS with Blank Password (telnet check)

The remote host is running MikroTik RouterOS without a password for its 'admin' account. Anyone can connect to it and gain administrative access to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid30213;...

[SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1483-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 06, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1483-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 06, 2008 http://www.debian.org/security/faq -...

DSA-1483-1 net-snmp - denial of service

Bulletin has no description...

MikroTik RouterOS 3.0 - SNMP SET Denial of Service

MikroTik RouterOS 3.0 - SNMP SET Denial of Service // source: https://www.securityfocus.com/bid/27599/info MikroTik RouterOS is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash an affected router, denying service to legitimate users. This issue affects...

microtik-dos.txt

/ -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ .0x48k. -------------------------------------------------------------------------- MicroTik RouterOS =3.2...

MikroTik RouterOS 3.0 - SNMP SET Denial of Service

// source: https://www.securityfocus.com/bid/27599/info MikroTik RouterOS is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash an affected router, denying service to legitimate users. This issue affects versions up to and including RouterOS 3.2. /...

MicroTik RouterOS 3.2 - SNMPd snmp-set Denial of Service

MicroTik RouterOS 3.2 - SNMPd snmp-set Denial of Service / -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ .0x48k...

libsmi, wireshark security update

CentOS Errata and Security Advisory CESA-2008:0058 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...