7280 matches found
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 is vulnerable to an exposure issue where a user or community can access MIB data that should be restricted. Affected are Net-SNMP components that serve MIB data; the root cause is improper enforcement of MIB view permissions. Impact is data disclosure of restricted MIB objec...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935: Undefined Security Weakness
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2002-1570
Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array...
CVE-2002-1570
CVE-2002-1570 affects snmpnetstat in ucd-snmp
Avaya Argent Office uses weak SNMP authentication mechanism
Overview The Avaya Argent Office does not properly enforce SNMP community string values, resulting in a weakened access control mechanism. Description The Avaya Argent Office does not properly enforce SNMP community string values. It will accept a null string i.e. as a valid community string and...
CVE-2002-1570: Undefined Security Weakness
Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array...
Compaq Web-enabled Management Software Default Account
The Compaq Web-based Management / HP System Management Agent active on the remote host is configured with the default, or a predictable, administrator password. Depending on the agents integrated, this allows an attacker to view sensitive and verbose system information, and may even allow more...
Microsoft Windows SMB Registry : SNMP Registry Key Permission Weakness Local Privilege Escalation
The registry key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users who are not in the admin group. Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11868;...
[Full-Disclosure] Emulex FibreChannel Hub Vulnerable to SNMP DoS Attack
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Emulex FibreChannel Hub Vulnerable to SNMP DoS Attack Number : 20030703-01-I Date : July 25, 2003 Reference : CERT CA-2002-03 Reference : CVE CAN-2002-0013 Reference : SGI BUG 882516 Fixed in : See Workaround SGI provides this...
Multiple SNMP problems
Multiple problems in different SNMP implementation can lead to DoS, remote code execution, etc...
Brocade Firmware SNMP Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Brocade Firmware SNMP Vulnerability Number : 20030405-01-I Date : April 11, 2003 Reference: SGI BUG 876762 Reference: CERT CA-2002-03 Reference: CVE CAN-2002-0013 Reference: CVE CAN-2002-0017 Fixed in : Brocade Firmware v2.6.0d or...
CVE-2002-1408
Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to 1 "'read-only' community access," and/or 2 an easily guessable community name...
Linksys BEFVP4 - SNMP Community String Information Disclosure
source: https://www.securityfocus.com/bid/7317/info Linksys BEFVP4 VPN router has been reported prone to a sensitive information disclosure vulnerability. It has been reported that SNMP community strings which, are world readble by default, contain sensitive information pertaining to the internal...
Linksys BEFVP4 - SNMP Community String Information Disclosure
Linksys BEFVP4 - SNMP Community String Information Disclosure source: https://www.securityfocus.com/bid/7317/info Linksys BEFVP4 VPN router has been reported prone to a sensitive information disclosure vulnerability. It has been reported that SNMP community strings which, are world readble by...
CVE-2002-0069
CVE-2002-0069 concerns Squid 2.4 STABLE3 and earlier with three issues per Mandrake MDKSA-2002:016-1: (1) memory leak in the SNMP interface that could allow remote DoS; (2) FTP URL handling buffer overflow that could cause DoS and possibly remote code execution (not confirmed); (3) HTCP interface...