PT-2015-4810

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.12SG4 Description A denial of service issue exists due to an unspecified condition during SNMP polling of an affected device configured for Virtual Switching System VSS with only one switch in the VSS cluster. This allows...

Mandriva Linux Security Advisory : net-snmp (MDVSA-2015:092)

Updated net-snmp packages fix security vulnerabilities : Remotely exploitable denial of service vulnerability in Net-SNMP, in the Linux implementation of the ICMP-MIB, making the SNMP agent vulnerable if it is making use of the ICMP-MIB table objects CVE-2014-2284. Remotely exploitable denial of...

Mandriva Linux Security Advisory : squid (MDVSA-2015:103)

Updated squid packages fix security vulnerabilities : Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128. Matthew Daley discovered that Squid 3 did not properly...

Sniff Sensitive Data From Interface or pcap: net-creds

Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP logins/passwords IRC...

IT-Grundschutz M4.080: Sichere Zugriffsmechanismen bei Fernadministration

IT-Grundschutz M4.080: Sichere Zugriffsmechanismen bei Fernadministration. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4080.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.080 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...

Squid 3.x < 3.4.8 Multiple Vulnerabilities

Binary data 8634.prm...

Code injection

The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service snmpd daemon reload via a malformed SNMP packet, aka Bug ID CSCur25858...

PT-2015-4788

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in the snmpd daemon reload, by sending a malformed SNMP packet. Recommendations At the moment, there i...

CVE-2015-0661: Improper Input Validation

The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service snmpd daemon reload via a malformed SNMP packet, aka Bug ID CSCur25858...

CVE-2015-0617

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices allow remote attackers to cause a denial of service CPU consumption and SNMP outage via malformed SNMP packets, aka Bug ID CSCur13393...

Code injection

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices allow remote attackers to cause a denial of service CPU consumption and SNMP outage via malformed SNMP packets, aka Bug ID CSCur13393...

CVE-2015-0617

CVE-2015-0617 affects Cisco ASR 5500 SAE Gateway devices. The vulnerability lies in the SNMP code failing to properly validate malformed SNMP packets, allowing an unauthenticated remote attacker to cause high CPU utilization and SNMP process outage (DoS). Cisco’s advisory notes that public softwa...

CVE-2015-0617

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices allow remote attackers to cause a denial of service CPU consumption and SNMP outage via malformed SNMP packets, aka Bug ID CSCur13393...

CVE-2015-0617: Undefined Security Weakness

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices allow remote attackers to cause a denial of service CPU consumption and SNMP outage via malformed SNMP packets, aka Bug ID CSCur13393...

PT-2015-4761

Name of the Vulnerable Software and Affected Versions Cisco ASR 5500 System Architecture Evolution SAE Gateway devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and SNMP outage, by sending malformed SNM...

Cisco ASR 5000 System Architecture Evolution Gateway High CPU Utilization Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco ASR 5500 System Architecture Evolution SAE Gateway could allow an unauthenticated, remote attacker to cause high CPU utilization and the SNMP process may stop responding. The vulnerability is due to insufficient validati...

SNMP Brute - Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script

SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options --help, -h show...

Extract data from pcap files: PCredz

Extract data from pcap files with PCredz This tool extracts Credit card numbers, NTLMDCE-RPC, HTTP, SQL, LDAP, etc, Kerberos AS-REQ Pre-Auth etype 23, HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. PCredz Features: Extract from a pcap file or from a live...

Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability

Document Title: =============== Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1356 Release Date: ============= 2015-01-14 Vulnerability Laboratory ID VL-ID: ==================================== 13...

Oracle Solaris Third-Party Patch Update : net-snmp (cve_2012_6151_resource_management)

The remote Solaris system is missing necessary patches to address security updates : - Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service crash or infinite loop, CPU consumption, and hang by...