6489 matches found
Squid SNMP Module asn_parse_header() Function Remote DoS
The remote Squid caching proxy, according to its version number, may be vulnerable to a remote denial of service attack. This flaw is caused due to an input validation error in the SNMP module, and exploitation requires that Squid not only was built to support it but also configured to use it. An...
Debian DSA-130-1 : ethereal - remotely triggered memory allocation error
Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal. This vulnerability was announced in the ethereal security advisory enpa-sa-00003. This issue has...
Debian DSA-111-1 : ucd-snmp - remote exploit
The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The...
squid -- SNMP module denial-of-service vulnerability
The Squid-2.5 patches page notes: If a certain malformed SNMP request is received squid restarts with a Segmentation Fault error. This only affects squid installations where SNMP is explicitly enabled via "make config". As a workaround, SNMP can be disabled by defining "snmpport 0" in squid.conf...
Symantec Enterprise Firewall/Symantec Gateway Security multiple bugs
DoS, UDP filtering bypass, SNMP information leakage...
GNU Radius < 1.2.94 SNMP Request Remote DoS
Binary data 2299.prm...
GNU Radius < 1.2.94 SNMP Request Remote DoS
Binary data 2300.prm...
CVE-2004-0849
The CVE-2004-0849 issue affects GNU Radius radiusd (versions 1.1 and 1.2 prior to 1.2.94) where an integer overflow in asn_decode_string() (snmplib/asn1.c) can crash the daemon via crafted SNMP requests when built with --enable-snmp. The vulnerability is triggered by very large unsigned values in...
CVE-2004-0849
Integer overflow in the asndecodestring function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service daemon crash via certain SNMP requests...
iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability
GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability iDEFENSE Security Advisory 09.15.04 www.idefense.com/application/poi/display?id=141&type=vulnerabilities September 15, 2004 I. BACKGROUND Radius is used for remote user authentication and accounting. For more informati...
Serverview weak permissions
Weak permissions for configuration file allow to change SNMP MIBs structure...
Ethereal fails to properly handle malfored SNMP packets
Overview Ethereal contains a vulnerability in the way it processes Simple Network Management Protocol SNMP packets. Description The Simple Network Management Protocol SNMP protocol enables network and system administrators to remotely monitor and configure devices on the network devices such as...
CVE-2002-1448
CVE-2002-1448 affects Avaya Cajun family devices (P330, P130, M770-ATM) with an undocumented SNMP read/write community string ('NoGaH$@!'), allowing remote attackers to gain administrative privileges. The vulnerability is supported by the CVSS2 base score of 7.5 (Network vector, Low attack comple...
CVE-2002-1170
Net-SNMP SNMP daemon (Net-SNMP/ucd-snmp) vulnerability CVE-2002-1170 affects 5.0.1–5.0.5. The issue resides in handle_var_requests() in snmp_agent.c, where a NULL dereference can occur while processing a crafted packet, leading to a denial-of-service crash. This is triggered by a loop that access...
CVE-2002-1170
The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...
CVE-2002-1448
An undocumented SNMP read/write community string 'NoGaH$@!' in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges...
CVE-2002-1170
The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...
SNMP apc Community String (deprecated)
Binary data 1406.prm...