Malformed SNMP Message-Handling Vulnerabilities

...

Multiple vulnerabilities in SNMPv1 request handling

Overview Multiple vendor SNMPv1 GetRequest, GetNextRequest , and SetRequest message handling implementations contain vulnerabilities that may allow unauthorized privileged access, denial-of-service conditions, or unstable behavior. If your site uses SNMP in any capacity, the CERT/CC encourages yo...

Cisco IOS 1112 - SNMP Message Denial of Service

Cisco IOS 1112 - SNMP Message Denial of Service // source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089,...

FreeBSD-SA-02:11.snmp

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:11 Security Advisory FreeBSD, Inc. Topic: ucd-snmp/net-snmp remotely exploitable vulnerabilities Category: ports Module: net-snmp Announced: 2002-02-12 Credits: OUSPG:...

Cisco IOS 11/12 - SNMP Message Denial of Service

// source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089, however more information is now available and a...

Malformed SNMP Message-Handling Vulnerabilities for Cisco Non-IOS Products

...

Linksys 'routers', SNMP issues

Howdy. LinkSys DSL 'routers' have some serious information leakage, and potention DDoS usage. The following models have been confirmed as having this problem: BEFN2PS4 EtherFast Cable/DSL Router & Voice with 4-Port Switch BEFSR81 EtherFast Cable/DSL Router with 8-Port Switch Querying these device...

Проблемы с snmp в linksys (information leakage)

После обращения к комьюнити public устройство начинает посылать на запрашивающих хос snmp-trap'ы с отладочной информацией...

Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow

Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow // source: https://www.securityfocus.com/bid/3780/info Net-SNMP is a package of software tools related to the Simple Network Management Protocol. One of the tools included is snmpnetstat, which can be used to retrieve and display a variety of...

Possible security problem with Cisco ubr900 series routers

Problem: RW access to the MIB, and eventually access to the router config, using ANY yes, ANY community name. The following routers were tested: ubr920, ubr924, ubr925 image file for the ubr925 is as follows: ubr925-k1sv4y556i-mz.121-3a.XL1 snmp-server commands used in each router config, not jus...

Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow

// source: https://www.securityfocus.com/bid/3780/info Net-SNMP is a package of software tools related to the Simple Network Management Protocol. One of the tools included is snmpnetstat, which can be used to retrieve and display a variety of information about a remote SNMP host. A heap overflow...

Проблемы в SNMP Cisco/Olicom/3Com (ILMI SNMP community)

Неоторые MIB-группы могут быть прочитаны/изменены с исопльзованием недокументированного SNMP-community ILMI и др.. Кроме того, могут "оживать" удаленные community...

CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications DOCSIS standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings...

VIGILANTe advisory 2001003 : Atmel SNMP Non Public Community Stri ng DoS Vulnerability

Atmel SNMP Non Public Community String DoS Vulnerability Advisory Code: VIGILANTE-2001003 Release Date: December 21, 2001 Systems affected: Atmel Firmware 1.3 Tested on a WAP11 Syslink Wireless Access Point WPC11 Wireless network PC card PCMCIA+PCI Under Windows 2000 Systems not affected: Vendor...

DoS против SNMP в Atmel

После запроса с неправильным SNMP-community перестают приниматься SNMP-запросы...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2001-1221

D-Link DWL-1000AP Firmware 3.2.28 483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information...

CVE-2001-0840

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...

CVE-2001-0840

The CVE applies to Compaq Insight Manager XE (version 2.1b and earlier). The vulnerability is a buffer overflow in the product that can be triggered remotely over SNMP or DMI, leading to arbitrary code execution. The root cause is an overflow condition in the handling of SNMP/DMI inputs. Exploita...

CVE-2001-0840: Undefined Security Weakness

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...