JVN#10056705 FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers

The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer series are digital multifunction copiers and printers. Some of these products contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server...

Canon digital multifunction copiers FTP bounce vulnerability

Overview Some models of Canon digital multifunction copiers are vulnerable to the FTP bounce attack. Description From the Problems With The FTP PORT Command document:The FTP Bounce Attack To conform with the FTP protocol, the PORT command has the originating machine specify an arbitrary destinati...

US-CERT Technical Cyber Security Alert TA07-355A -- Adobe Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-355A Adobe Updates for Multiple Vulnerabilities Original release date: December 21, 2007 Last revised: -- Source: US-CERT Systems Affected Adobe Flash Player 9.0.48.0 and earlier Adobe...

Code injection

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...

[SECURITY] Fedora 7 Update: snort-2.7.0.1-3.fc7

Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows,...

Race condition

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2896

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2896

CVE-2007-2896 affects Symantec Enterprise Security Manager (ESM) 6.5.3 on Windows prior to 20070524. The issue is a race condition that allows remote attackers to cause denial of service via certain network scans directed at ESM ports, leading to CPU consumption and application hang. Descriptions...

DSA-1103 kernel-source-2.6.8 - several vulnerabilities

Bulletin has no description...

USN-281-1: Linux kernel vulnerabilities

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

CVE-2004-2377

The CVE-2004-2377 entry affects Alcatel OmniSwitch 7000 and 7800. It permits remote attackers to cause a denial of service (reboot) via certain network scans, demonstrated with a Nessus scan of ports 1–1024 with safe-checks disabled. The NVD/CVE records note a network-accessible impact with parti...

CVE-2002-2052

Cisco 2611 router running IOS 12.16.5, possibly an interim release, allows remote attackers to cause a denial of service via port scans such as 1 scanning all ports on a single host and 2 scanning a network of hosts for a single open port through the router. NOTE: the vendor could not reproduce...

CVE-2002-2052

CVE-2002-2052 affects a Cisco 2611 router running IOS 12.1(6.5) (interim release suspected). The vulnerability allows remote attackers to cause a denial of service by performing port scans (either all ports on a single host or scanning a network for a single open port) through the router. The ven...

CVE-2002-1925

CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...

CVE-2004-1631

Open WorkFlow Engine OpenWFE 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results...

CVE-2004-2377

Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service reboot via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled...

CVE-2004-1631

Open WorkFlow Engine OpenWFE 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results...

Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug

Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug. Affected Product Only tested on...: Mcafee Virus Scan professional 8.0.0.12 Norton Antivirus 2003 Kaspersky 4.5x Ad-Aware 6.0.1.181 The Cleaner Risk Level: Medium Description: ------------ A malicious code can reside in a...

CVE-2002-1501

The MPS functionality in Enterasys SSR8000 Smart Switch Router before firmware 8.3.0.10 allows remote attackers to cause a denial of service crash via multiple port scans to ports 15077 and 15078...