PT-2019-3265

Name of the Vulnerable Software and Affected Versions Cisco FXOS Software affected versions not specified Cisco NX-OS Software affected versions not specified Description The issue is due to improper validation of Abstract Syntax Notation One ASN.1-encoded variables in SNMP packets. An attacker...

PT-2019-3166

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the implementation of the Simple Network Management Protocol SNMP Access Control List ACL feature could allow an unauthenticated, remote attacker to perform SN...

RICOH Printer Detection (SNMP)

SNMP based detection of RICOH printer devices. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

RICOH Printer Detection Consolidation

Consolidation of RICOH Printer device detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2019-14307

Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is...

Buffer overflow

Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is...

CVE-2019-14307

CVE-2019-14307 affects Ricoh SP C250DN/C252DN and SP C250SF/SP C252SF printers. Multiple buffer overflows occur while parsing HTTP parameter settings for SNMP, allowing a remote attacker to cause denial of service or execute code via crafted requests to the web server. Affected firmware versions ...

PT-2019-13598

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12 Description The issue affects several Ricoh printer models, where multiple buffer overflows occur when parsing HTTP parameter settings for SNMP. This...

Ubuntu: Security Advisory (USN-4105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4105-1 cups vulnerabilities

Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. CVE-2019-8696, CVE-2019-8675 It was discovered that CUPS did not properly handle...

USN-4105-1: CUPS vulnerabilities

Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. CVE-2019-8696, CVE-2019-8675 It was discovered that CUPS did not properly handle...

FreeBSD : CUPS -- multiple vulnerabilities (60e991ac-c013-11e9-b662-001cc0382b2f)

Apple reports : - CVE-2019-8696 and CVE-2019-8675: SNMP buffer overflows. - IPP buffer overflow. - Memory disclosure in the scheduler. - DoS issues in the scheduler. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

Ubuntu 16.04 LTS / 18.04 LTS : CUPS vulnerabilities (USN-4105-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4105-1 advisory. StephanZeisbergdiscovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issu...

CUPS -- multiple vulnerabilities

Apple reports: CVE-2019-8696 and CVE-2019-8675: SNMP buffer overflows. IPP buffer overflow. Memory disclosure in the scheduler. DoS issues in the scheduler...

NewStart CGSL MAIN 5.04 : net-snmp Multiple Vulnerabilities (NS-SA-2019-0017)

The remote NewStart CGSL host, running version MAIN 5.04, has net-snmp packages installed that are affected by multiple vulnerabilities: - SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resourc...

FreeBSD-SA-19:20.bsnmp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:20.bsnmp Security Advisory The FreeBSD Project Topic: Insufficient message length validation in bsnmp library Category: contrib Module: bsnmp Announced:...

Net-SNMP Buffer Overflow Vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A buffer overflow vulnerability exists in Net-SNMP version 5.8. The vulnerability originates when a network system or product...

Cisco Catalyst 3850 Series Device Manager 3.6.10E Cross Site Request Forgery

Product : Catalyst 3850 Series Device Manager Version : 3.6.10E Date: 01.08.2019 Vendor Homepage: https://www.cisco.com Exploit Author: Alperen Soydan Description : The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify...

Crestron AirMedia Presentation Gateway Detection Consolidation

Consolidation of Crestron AirMedia Presentation Gateway detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2019-1716)

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to...