CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications DOCSIS standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

CVE-2001-1221

The CVE-2001-1221 entry affects D‑Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The issue is use of a default SNMP community string 'public', allowing remote attackers to obtain sensitive information. The provided documents do not specify affected versions beyond the listed...

CVE-2001-1221

D-Link DWL-1000AP Firmware 3.2.28 483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information...

CVE-2002-0109

Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP...

CVE-2002-0109

CVE-2002-0109 affects Linksys EtherFast BEFN2PS4, BEFSR41, BEFSR81 routers (and possibly other products). A remote attacker can query with the default SNMP community string “public,” which may cause the device to reveal information and modify configuration, triggering SNMP traps back to the attac...

CVE-2001-0514

SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain...

CVE-2001-0514

The CVE-2001-0514 issue affects Atmel 802.11b VNET-B Access Point 1.3 and earlier (as used in Netgear ME102 and Linksys WAP11). The SNMP service accepts arbitrary community strings with requested MIB modifications, enabling remote attackers to obtain sensitive information (e.g., WEP keys), cause ...

CVE-2001-0487

CVE-2001-0487 affects the AIX SNMP server (snmpd) and allows remote attackers to cause a denial of service by sending a RST during the TCP connection. The provided documents do not specify the exact vulnerable component version range, affected product family beyond “AIX SNMP server snmpd,” or any...

CVE-1999-1335

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information...

CVE-1999-0815

CVE-1999-0815 describes a memory leak in the SNMP agent of Windows NT 4.0 before SP5. This vulnerability allows remote attackers to cause a denial of service (memory exhaustion) by sending a large number of queries. The affected component is the SNMP agent on Windows NT 4.0 SP5 or earlier; the ro...

CVE-1999-1335

CVE-1999-1335 concerns the cmu-snmp package’s snmpd server on Red Hat Linux 4.0 prior to 3.3-1. The vulnerability arises because snmpd is configured to allow remote attackers to read and write sensitive information. Affected product: cmu-snmp snmpd; vulnerable version before 3.3-1. Remediation pe...

CVE-1999-0815

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-2001-0236

Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event...

CVE-2001-0487

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...

CVE-2001-0564

The CVE concerns the APC Web/SNMP Management Card (firmware before 310). The vulnerability arises because the device allows only a single telnet connection, enabling a remote attacker to cause a denial of service by repeatedly failing logon attempts, temporarily locking the card. A fix is availab...

CVE-2002-0053

Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and...

CVE-2002-0069

Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service...

nCipher Security Advisory #2: SNMP vulnerabilities

SUMMARY ======= SNMP agents supplied by nCipher, as well as those required to run other nCipher SNMP aupport software, could be vulnerable to buffer overflow attacks including denial of service and privilege elevation. BACKGROUND ========== nCipher supplies a range of Hardware Security Modules HS...

[SECURITY] [DSA-111-2] Update for SNMP security fix

Package : ucd-snmp Problem type : ABI/API correction to previous security fix Debian-specific: yes Some of the changes made in the DSA-111-1 security fix for SNMP changed the API and ABI for the SNMP library which broke some other applications. This has been fixed in version 4.1.1-2.1. We apologi...