CVE-2004-0312

CVE-2004-0312 affects Linksys WAP55AG (firmware 1.07) where an SNMP read-only community can be exploited to gain access to read/write community strings by querying OID 1.3.6.1.4.1.3955.2.1.13.1.2. This reveals a flaw in SNMP information exposure that allows escalation from read to write access. T...

CVE-2004-0312

Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2...

Multiple bugs in Cisco ONS

DoS and unauthorized access via TFTP, FTP, SNMP, telnet...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base communi...

SNMP information leak in Linksys

It's possible to retrieve all community strings...

SNMP community string disclosure in Linksys WAP55AG

Linksys WAP55AG does not properly secure SNMP community strings. In particular, it is possible to obtain all community strings, including read/write, by querying OID 1.3.6.1.4.1.3955.2.1.13.1.2. 1.3.6.1.4.1.3955.2.1.13.1.2.1 = STRING: "public" 1.3.6.1.4.1.3955.2.1.13.1.2.2 = STRING: "private"...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings may be disclosed to a remote...

APC 9606 SmartSlot Web/SNMP management card "backdoor"

Background: APC American Power Conversion SmartSwitch and UPS uninterruptible power supply products have a Web and SNMP management card installed that permits local serial console, TELNET, web and SNMP management, monitoring and mains power control of attached devices. The Problem: APC SmartSlot...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated Net-SNMP packages are available that correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MI...

CVE-2003-1002

Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via an SNMPv3 message when snmp-server is set...

Cisco WEP key leak via SNMP trap

SNMP trap message contains key information...

[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Net-SNMP packages fix security and other bugs Advisory ID: RHSA-2003:335-01 Issue date: 2003-12-02 Updated on: 2003-12-02 Product: Red...

Net-SNMP information leak

With knowledge of any community it's possible to gain access to all MIB objects...

[Full-Disclosure] Cisco Security Advisory: SNMP trap Reveals WEP Key in Cisco Aironet AP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SNMP trap Reveals WEP Key in Cisco Aironet AP Revision 1.0 For Public Release 2003 December 02 17:00 UTC GMT - ------------------------------------------------------------------------ Summary ======= Cisco Aironet Access Point...

Moderate: Red Hat Security Advisory: : Updated Net-SNMP packages fix security and other bugs

Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...

SNMP Trap Reveals WEP Key in Cisco Aironet Access Point

...

CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

DEBIAN-CVE-2003-0935

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...

CVE-2003-0935

Net-SNMP before 5.0.9 is vulnerable to an exposure issue where a user or community can access MIB data that should be restricted. Affected are Net-SNMP components that serve MIB data; the root cause is improper enforcement of MIB view permissions. Impact is data disclosure of restricted MIB objec...