SNMP Zero Length UDP Packet Remote DoS

It was possible to crash either the remote host or the firewall in between us and the remote host by sending an UDP packet of null size going to port 161 snmp This flaw may allow an attacker to shut down your network. C Tenable Network Security, Inc. Thanks to Christophe Grenier for pointing this...

aix-snmp.txt

Following on from Michael Zalewski's recent SNMP post, here's an issue i noted on two AIX systems. NOTE: This was seen on both AIX 4.3 and 4.2. It appears that on the above releases of AIX, the SNMP daemon is enabled by default and two community names are enabled with read/write privileges. The...

snmp.writable.txt

Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-2000-0147

The CVE-2000-0147 issue affects snmpd on SCO OpenServer, where the SNMP community string is writable by default. This enables local attackers to modify the host’s configuration. Connected sources corroborate the default-write vulnerability but do not provide a patch or explicit remediation details.

Ascom COLTSOHO / Brocade Fabric OS / MatchBox / Win98/NT4 / Solaris / Xyplex - SNMP World Writeable Community

Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source: https://www.securityfocus.com/bid/986/info In a number of network devices/operating systems, some...

Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community

Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source:...

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-1999-0254

A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information...

CVE-1999-0792

CVE-1999-0792 affects ROUTERmate, where a default SNMP community name enables remote attackers to modify the device’s configuration. The vulnerability arises from using a default community string, permitting network-remote access to config settings. Connected sources reaffirm the issue but do not...

CVE-1999-0517

An SNMP community name is the default e.g. public, null, or missing...

CVE-1999-0516

An SNMP community name is guessable...

CVE-1999-0186

The CVE-1999-0186 entry concerns Solaris where an SNMP subagent uses a default community string, enabling remote attackers to execute arbitrary commands as root or modify system parameters. The NVD record shows a base score of 10.0 (HIGH) with Network attack vector, low complexity, and complete i...

CVE-1999-0792

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration...

CVE-1999-0499

NETBIOS share information may be published through SNMP registry keys in NT...

CVE-1999-0615

CVE-1999-0615 entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-1999-0517

CVE-1999-0517 identifies an SNMP flaw where the community string is default (public), null, or missing. This enables remote SNMP access to the device, with potential exposure of SNMP data and management actions. The vulnerability is reflected across various advisories and scanners (including F5 B...

CVE-1999-0499

CVE-1999-0499 describes exposure of NETBIOS share information in Windows NT by publishing it through SNMP registry keys. Connected sources (Red Hat advisory; Nessus LANMAN disclosures) confirm information disclosure via SNMP OIDs for LanMan services/shares/users, enabling an attacker to learn tar...

CVE-1999-0254

CVE-1999-0254 relates to HP OpenView and describes a hidden SNMP community string vulnerability. A remote attacker could exploit this via SNMP to modify MIB tables and obtain sensitive information, with network access and no authentication required. The NVD entry records a CVSSv2 base score of 10...

CVE-1999-0516

CVE-1999-0516 concerns SNMP where the community name is guessable. The provided materials indicate SNMP default/community names (e.g., public) and show Metasploit modules that probe/login using common community strings. The CVSS data in the entry implies network access with low complexity and no ...