CVE-2002-0012

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

CVE-2002-0013: Undefined Security Weakness

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...

CVE-2002-0012: Undefined Security Weakness

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

CVE-2002-0053: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and...

[SECURITY] [DSA-111-1] Multiple SNMP vulnerabilities

Package : ucd-snmp Problem type : remote exploit Debian-specific: no CERT Advisory : CA-2002-03 The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploit...

CVE-2002-0012

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

CVE-2002-0013

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...

Security Bulletin MS02-006

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run Date: 12 February 2002 Software: Microsoft Windows 95, 98, 98SE, NT 4.0, NT 4.0 Terminal Server Edition, 2000, ...

Multiple Vendor Malformed SNMP Message-Handling DoS

It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields. An attacker may use this flaw to prevent you from using SNMP to administer your network or use other flaws to execute arbitrary code with the privileges of the SNMP daemon. C Tenable...

Multiple Vendor Malformed SNMP Trap Handling DoS

It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields. An attacker may use this flaw to prevent you from using SNMP to administer your network or use other flaws to execute arbitrary code with the privileges of the SNMP daemon. C Tenable...

ROTOS Remote SNMP Attack Tool

Internet Security Systems Security Alert February 12, 2002 PROTOS Remote SNMP Attack Tool Synopsis: ISS X-Force has learned of a powerful SNMP Simple Network Management Protocol attack tool that may be circulating in the computer underground. The PROTOS SNMP stress-testing tool sends thousands of...

Malformed SNMP Message-Handling Vulnerabilities

...

Multiple vulnerabilities in SNMPv1 request handling

Overview Multiple vendor SNMPv1 GetRequest, GetNextRequest , and SetRequest message handling implementations contain vulnerabilities that may allow unauthorized privileged access, denial-of-service conditions, or unstable behavior. If your site uses SNMP in any capacity, the CERT/CC encourages yo...

FreeBSD-SA-02:11.snmp

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:11 Security Advisory FreeBSD, Inc. Topic: ucd-snmp/net-snmp remotely exploitable vulnerabilities Category: ports Module: net-snmp Announced: 2002-02-12 Credits: OUSPG:...

Cisco IOS 1112 - SNMP Message Denial of Service

Cisco IOS 1112 - SNMP Message Denial of Service // source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089,...

Cisco IOS 11/12 - SNMP Message Denial of Service

// source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089, however more information is now available and a...

Malformed SNMP Message-Handling Vulnerabilities for Cisco Non-IOS Products

...

Проблемы с snmp в linksys (information leakage)

После обращения к комьюнити public устройство начинает посылать на запрашивающих хос snmp-trap'ы с отладочной информацией...

Linksys 'routers', SNMP issues

Howdy. LinkSys DSL 'routers' have some serious information leakage, and potention DDoS usage. The following models have been confirmed as having this problem: BEFN2PS4 EtherFast Cable/DSL Router & Voice with 4-Port Switch BEFSR81 EtherFast Cable/DSL Router with 8-Port Switch Querying these device...

Проблемы в SNMP Cisco/Olicom/3Com (ILMI SNMP community)

Неоторые MIB-группы могут быть прочитаны/изменены с исопльзованием недокументированного SNMP-community ILMI и др.. Кроме того, могут "оживать" удаленные community...