CVE-2000-1159

CVE-2000-1159 affects the NAI Sniffer Agent. The vulnerability allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and ...

CVE-2000-1159

NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands...

CVE-2000-1157

Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name...

CVE-2000-1157

The CVE-2000-1157 entry concerns the NAI Sniffer Agent, where a vulnerability exists in the handling of SNMP community names that can cause a buffer overflow. This leads to the possibility of remote command execution over the network by unauthenticated attackers, as indicated by the description o...

CVE-2000-1159: Undefined Security Weakness

NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands...

CVE-2000-1157: Undefined Security Weakness

Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name...

CVE-2000-1158: Undefined Security Weakness

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords...

CVE-2000-1160: Undefined Security Weakness

NAI Sniffer Agent allows remote attackers to cause a denial of service crash by sending a large number of login requests...

Remotely exploitable buffer overflow in NAI's Distributed Sniffer Agent

Bugtraq. This 'advisory' details a number of problems with NAI's sniffer product. They have fixed the problems in current versions on the sly so I have foregone notifying the vendor. They saw fit to post an advisory on Microsoft's Netmon today so 'all is fair in love and war' at least MS had the...

Дырки в NAI Sniffer Agent

Множественные уязвимости - переполнениея буфера, пароли в открытом тексте, управление без установки сеанса...

`sniffit -L mail' vulnerabilities

------- sniffit -L mail' vulnerabilities : oldies but goodies ------- ----------------------- MaXX [email protected] ----------------------- -- 0x00 - Sniffit ---------------------------------------------------- Sniffit is a packet sniffer, written by Brecht Claerhout [email protected]. The...

Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 - Denial of Service

source: https://www.securityfocus.com/bid/1013/info Trend Micro OfficeScan is an antivirus software program which is deployable across an entire network. During the installation of the management software, the administrator is asked to choose between managing from a webserver or from a fileserver...

aass_patch.txt

--- aass-old.c Mon Jul 26 20:45:46 1999 +++ aass.c Mon Jul 26 21:54:47 1999 @@ -1,5 +1,5 @@ / - The AntiAntiSniffer Sniffer by Mike Perry + The AntiAntiSniffer Sniffer v0.2 by Mike Perry To all my friends, coworkers, and associates who thought I knew better than to do something like this, please...

linux2.2.1-proc-smp-race-sniffer.txt

Date: Tue, 2 Feb 1999 17:39:13 +0100 From: Andrea Arcangeli To: [email protected] Subject: patch /proc race fixes for 2.2.1 fwd This is a short analysis I've done yesterday about the array.c /proc/pid/... races of Linux-2.2.0 and Linux-2.2.1. These races was leading to very easily reproducible...

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode (1)

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode 1 // source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffe...

Ethereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (2)

source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers will attempt to decode DNS request and queries. However, due ...

Ethereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (1)

// source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers will attempt to decode DNS request and queries. However, d...