SNMP Community String Detection

Binary data 7134.pasl...

Cisco IOS SNMP DoS (CSCug65204)

The remote Cisco device potentially contains an issue in the SNMP module which may allow remote authenticated users to cause a denial of service device reload via continuous SNMP polling requests. TRUSTED...

Cisco IOS XE SNMP DoS (CSCug65204)

The remote Cisco device potentially contains an issue in the SNMP module which may allow remote authenticated users to cause a denial of service device reload via continuous SNMP polling requests. TRUSTED...

net-snmp -- snmptrapd crash

Murray McAllister reports: A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to...

Oracle Solaris Critical Patch Update : oct2013_SRU11_1_12_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Cacao. Supported versions that are affected are 10 and 11.1. Difficult to exploit vulnerability allows successful...

SNMP GETBULK Reflected DRDoS

The remote SNMP daemon allows distributed reflection and amplification DRDoS attacks. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SNMP 'GETBULK' Reflection DDoS

The remote SNMP daemon is responding with a large amount of data to a 'GETBULK' request with a larger than normal value for 'max-repetitions'. A remote attacker can use this SNMP server to conduct a reflected distributed denial of service attack on an arbitrary remote host. TRUSTED...

Infoblox 6.8.4.x Weak MySQL Password

Product: Network Automation • NetMRI • Switch Port Manager • Automation Change Manager • Security Device Controller Vendor: InfoBlox Vulnerable Versions: 6.4.X.X-6.8.4.X Tested Version: 6.8.2.11 Vendor Notification: May 12th, 2014 Public Disclosure: July 9th, 2014 Vulnerability Type: OS Command...

Medium: php54

Issue Overview: acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. A denial of service flaw was found in the way the File Information fileinfo extension parsed certain...

[SECURITY] Fedora 20 Update: cacti-0.8.8b-7.fc20

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 19 Update: cacti-0.8.8b-7.fc19

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

ZTE ZXV10 W300 Router - Hardcoded Credentials

No description provided by source. Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic realm=index.htm References:...

HP OpenView Network Node Manager 6.10 SNMP DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 13...

Proxim Tsunami MP.11 2411 Wireless Access Point 'system.sysName.0' SNMP HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31666/info The Proxim Tsunami MP.11 2411 Wireless Access Point is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Attacker-supplied HTML and script code would r...

Net-SNMP 4.2.3 snmpnetstat Remote Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3780/info Net-SNMP is a package of software tools related to the Simple Network Management Protocol. One of the tools included is snmpnetstat, which can be used to retrieve and display a variety of information about a...

Castle Rock Computing SNMPc <= 7.0.19 - Community String Stack Based Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28990/info Castle Rock Computing SNMPc is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to execute...

BMC Software Patrol <= 3.2.5 Patrol SNMP Agent File Creation/Permission Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the owner of the parent directory of th...

Nortel CVX 1800 Multi-Service Access Switch Default SNMP Community Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4507/info Nortel CVX 1800 Multi-Service Access Switch is a hardware modem bank. The device contains a default SNMP community string of public, which may allow enable a remote attacker to gain access to sensitive informati...

ICONICS WebHMI ActiveX Stack Overflow

No description provided by source. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl observer = 0.3.2.1 Remote Command Execution Script: Observer is an autodiscovering PHP/MySQL/SNMP/CDP...