CVE-2004-0714

Cisco Internetwork Operating System IOS 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports UDP 162 and a randomly chosen UDP port, which allows remote attackers to cause a denial of service device reload and memory corruption...

Ethereal: Multiple security problems

Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.5, including: In some cases the iSNS dissector could cause Ethereal to abort. If there was no policy name for a handle for SMB SID snooping it...

CVE-2004-0635

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...

CVE-2004-0635

CVE-2004-0635 affects Ethereal 0.8.15–0.10.4, where the SNMP dissector is vulnerable. A remote attacker can trigger a denial of service (process crash) via a malformed or missing community string, causing an out-of-bounds read. The description explicitly ties the issue to the SNMP dissector, the ...

RHEL 3 : net-snmp (RHSA-2004:023)

Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...

CVE-2004-0576

The CVE-2004-0576 issue affects GNU Radius 1.1 when built with the -enable-snmp option. The underlying vulnerability is in the SNMP message handling code, where a malformed SNMP packet containing an invalid OID can cause the radiusd service to crash, enabling remote denial-of-service exploitation...

CVE-2004-0616

The vulnerability CVE-2004-0616 affects the BT Voyager 2000 Wireless ADSL Router, where a default public SNMP community name allows remote attackers to obtain sensitive information (plaintext password). Root cause: default SNMP community name. Impact: confidentiality is partially affected; exploi...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

CVE-2004-0576

The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...

[Full-Disclosure] Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)

Arhont Ltd. - Information Security Arhont Advisory by: Konstantin Gavrilenko http://www.arhont.com Advisory: cleartext account password obtainable using SNMP Class: design/configuration bug Test platform: BT Voyager 2000 Wireless ADSL Router Vendor Contact Date: 10/06/2004 PD release date:...

[Full-Disclosure] iDEFENSE Security Advisory 06.21.04 - GNU Radius SNMP Invalid OID Denial of Service Vulnerability

GNU Radius SNMP Invalid OID Denial of Service Vulnerability iDEFENSE Security Advisory 06.21.04 www.idefense.com/application/poi/display?id=110&type=vulnerabilities June 21, 2004 I. BACKGROUND Radius is a server for remote user authentication and accounting. More information about Radius is...

GNU RADIUS SNMP DoS

SNMP packet with invalid oid causes server to crash...

BT Voyager SNMP information leak

Password is accessible for reading via SNMP...

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure source: https://www.securityfocus.com/bid/10589/info BT Voyager 2000 Wireless ADSL Router is reported prone to a sensitive information disclosure vulnerability. It is reported that 'public' SNMP MIB community...

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure

source: https://www.securityfocus.com/bid/10589/info BT Voyager 2000 Wireless ADSL Router is reported prone to a sensitive information disclosure vulnerability. It is reported that 'public' SNMP MIB community strings which, are world readable by default contain sensitive information pertaining to...

Cisco SNMP DoS

Malformed packet can cause router to crash...

Cisco Security Advisory: Vulnerabilities in SNMP Message Processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in SNMP Message Processing Revision 1.0 INTERIM For Public Release 2004 April 20 UTC 2100 - ----------------------------------------------------------------------- Contents ======== Summary Affected Products...

US-CERT Technical Cyber Security Alert TA04-111B -- Cisco IOS SNMP Message Handling Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco IOS SNMP Message Handling Vulnerability Original release date: April 20, 2004 Last revised: -- Source: US-CERT Systems Affected Cisco routers and switches running vulnerable versions of IOS. Vulnerable IOS versions known to be affected include:...

Vulnerabilities in SNMP Message Processing

...

Cisco IOS fails to properly process solicited SNMP operations

Overview Cisco IOS contains a vulnerability in the processing of solicited Simple Network Management Protocol SNMP operations that may result in memory corruption of the device causing it to reload. Sustained exploitation of this vulnerability could lead to a denial of service condition affect a...