Squid < 2.5.STABLE7 SNMP ASN.1 Parser Remote DoS

Binary data 2363.prm...

squid SNMP DoS

ASN.1 parsing problems...

[Full-Disclosure] iDEFENSE Security Advisory 10.11.04: Squid Web Proxy Cache Remote Denial of Service Vulnerability

Squid Web Proxy Cache Remote Denial of Service Vulnerability iDEFENSE Security Advisory 10.11.04: www.idefense.com/application/poi/display?id=152&type=vulnerabilities October 11, 2004 I. BACKGROUND Squid Web Proxy Cache is a full-featured web proxy cache designed to run on Unix systems. It suppor...

Squid SNMP Module asn_parse_header() Function Remote DoS

The remote Squid caching proxy, according to its version number, may be vulnerable to a remote denial of service attack. This flaw is caused due to an input validation error in the SNMP module, and exploitation requires that Squid not only was built to support it but also configured to use it. An...

squid -- SNMP module denial-of-service vulnerability

The Squid-2.5 patches page notes: If a certain malformed SNMP request is received squid restarts with a Segmentation Fault error. This only affects squid installations where SNMP is explicitly enabled via "make config". As a workaround, SNMP can be disabled by defining "snmpport 0" in squid.conf...

Debian DSA-130-1 : ethereal - remotely triggered memory allocation error

Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal. This vulnerability was announced in the ethereal security advisory enpa-sa-00003. This issue has...

Debian DSA-111-1 : ucd-snmp - remote exploit

The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The...

Symantec Enterprise Firewall/Symantec Gateway Security multiple bugs

DoS, UDP filtering bypass, SNMP information leakage...

GNU Radius < 1.2.94 SNMP Request Remote DoS

Binary data 2300.prm...

GNU Radius < 1.2.94 SNMP Request Remote DoS

Binary data 2299.prm...

CVE-2004-0849

Integer overflow in the asndecodestring function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service daemon crash via certain SNMP requests...

CVE-2004-0849

The CVE-2004-0849 issue affects GNU Radius radiusd (versions 1.1 and 1.2 prior to 1.2.94) where an integer overflow in asn_decode_string() (snmplib/asn1.c) can crash the daemon via crafted SNMP requests when built with --enable-snmp. The vulnerability is triggered by very large unsigned values in...

CVE-2004-0849: Undefined Security Weakness

Integer overflow in the asndecodestring function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service daemon crash via certain SNMP requests...

iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability

GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability iDEFENSE Security Advisory 09.15.04 www.idefense.com/application/poi/display?id=141&type=vulnerabilities September 15, 2004 I. BACKGROUND Radius is used for remote user authentication and accounting. For more informati...

Serverview weak permissions

Weak permissions for configuration file allow to change SNMP MIBs structure...

Ethereal fails to properly handle malfored SNMP packets

Overview Ethereal contains a vulnerability in the way it processes Simple Network Management Protocol SNMP packets. Description The Simple Network Management Protocol SNMP protocol enables network and system administrators to remotely monitor and configure devices on the network devices such as...

CVE-2002-1448

An undocumented SNMP read/write community string 'NoGaH$@!' in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges...

CVE-2002-1170

Net-SNMP SNMP daemon (Net-SNMP/ucd-snmp) vulnerability CVE-2002-1170 affects 5.0.1–5.0.5. The issue resides in handle_var_requests() in snmp_agent.c, where a NULL dereference can occur while processing a crafted packet, leading to a denial-of-service crash. This is triggered by a loop that access...

CVE-2002-1170

The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...

CVE-2002-1448

CVE-2002-1448 affects Avaya Cajun family devices (P330, P130, M770-ATM) with an undocumented SNMP read/write community string ('NoGaH$@!'), allowing remote attackers to gain administrative privileges. The vulnerability is supported by the CVSS2 base score of 7.5 (Network vector, Low attack comple...