net-snmp -- denial of service via GETBULK request

CVE reports: The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

Common UNIX Printing System 1.2/1.3 SNMP - 'asn1_get_string()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/26917/info Common UNIX Printing System CUPS is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this issue allows attacke...

CVE-2002-2402

The CVE-2002-2402 entry concerns SURECOM broadband router EP-4501, which ships with default SNMP community strings: read = “public” and read/write = “secret.” This default configuration allows remote attackers to read and modify router configuration information. The vulnerability is tied to the d...

CVE-2002-2402

SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information...

Nagios Plugins SNMP GET回复远程缓冲区溢出漏洞

Nagios Plugins是一款用于监视网络和服务状况的应用软件。 Nagios Plugins当解析snmpget回复时checksnmp存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 在从snmpget回复中拷贝perfstr字符数组缺少正确的边界检查，可导致checksnmp函数处理时触发缓冲区溢出，精心构建回复消息可能以应用程序进程权限执行任意指令。 Nagios Plugins 1.4.10 可参考如下链接获得补丁程序：...

Cisco IOS LPD buffer overflow vulnerability

Overview The Cisco IOS Line Printer Daemon contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition . Description The Cisco IOS includes support for the UNIX Line Printer Daemon...

Cisco IOS LPD远程缓冲区溢出漏洞

BUGTRAQ ID: 26001 Cisco IOS是Cisco网络设备中所使用的操作系统。 Cisco IOS的LPD服务在处理超长的设备名时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制设备或导致设备拒绝服务。 行式打印机服务（LPD）用于在Cisco IOS中提供打印服务。如果IOS中配置了LPD守护程序的话，该服务会监听于默认的LPD端口TCP 515。如果任何非515的源TCP端口进行连接时，就会显示以下错误： $ telnet 172.30.3.101 515 Trying 172.30.3.101... Connected to 172.30.3.101...

IRM Advisory: Cisco IOS LPD Remote Stack Overflow

---------------------------------------------------------------------- IRM Security Advisory 024 Cisco IOS LPD Remote Stack Overflow Vulnerability Type / Importance: Remote Code Execution / High Problem Discovered: 30 July 2007 Vendor Contacted: 30 July 2007 Advisory Published: 10 October 2007...

Cisco IOS 12.3 - LPD Remote Buffer Overflow

Cisco IOS 12.3 - LPD Remote Buffer Overflow source: https://www.securityfocus.com/bid/26001/info Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Cisco IOS 12.3 - 'LPD' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/26001/info Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the affecte...

Cisco Catalist loopback address access protection bypass

SNMP access by address 127.0.0.x is possible, making it possible to bypass IP filtering...

[Full-disclosure] CAT6500 accessible via 127.0.0.x loopback addresses

Lee E Rian/TCO/HQ/BOC wrote on 08/29/2006 01:49:40 PM: I found something interesting w/ the cat6000s - telnet 127.0.0.11 gets you into the switch & telnet 127.0.0.12 gets you into the router snmpget 127.0.0.11 sysDescr.0 RFC1213-MIB::sysDescr.0 = STRING: "Cisco Systems WS-C6509.Cisco Catalyst...

[SECURITY] Fedora 7 Update: cacti-0.8.6j-8.fc7

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

IPS-1 Protection Update for SNMP (Version 21)

This release is a maintenance update to SNMP...

php523snmpget-overflow.txt

http://milw0rm.com/exploits/4204 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache / if !extensionloaded"snmp" die"sn...

PHP <= 5.2.3 snmpget() object id Local Buffer Overflow Exploit

No description provided by source. ?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote...

Design/Logic Flaw

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3776

CVE-2007-3776 affects Cisco Unified Communications Manager (CUCM) and Unified Presence Server (CUPS). The issue is an information disclosure vulnerability where remote attackers can obtain sensitive data (SNMP community strings and configuration settings) through unspecified vectors. The sources ...