Sun Solaris SNMP proxy agent /opt/SUNWssp/bin/snmpd contains buffer overflow

Overview The SNMP proxy agent on certain large Solaris systems contains a buffer overflow. It may be possible, though it is unconfirmed, that an intruder could use this flaw to execute code with root privileges. Description The Sun Enterprise 10000 is monitored and controlled by a systems called ...

CVE-2001-0236

Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event...

Cisco Catalyst 2900 12.0 - 5.2XU SNMP Empty UDP Packet Denial of Service

Cisco Catalyst 2900 12.0 - 5.2XU SNMP Empty UDP Packet Denial of Service source: https://www.securityfocus.com/bid/2689/info The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use ...

Cisco Catalyst 2900 12.0 - '5.2'XU SNMP Empty UDP Packet Denial of Service

source: https://www.securityfocus.com/bid/2689/info The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use in organizations sized from small business to large enterprise. A problem...

Cisco IOS/X12-X15 has default SNMP read/write string of "cable-docsis"

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read and modify its configuration, creating a denial-of-service condition, an information leak, or both...

Cisco IOS creates SNMP read-only community string

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read its configuration, creating an information leak. Description Certain versions of the Cisco...

Cisco IOS/CatOS exposes read-write SNMP community string via traversal of View-based Access Control MIB (VACM) using read-only community string

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read and modify its configuration, creating a denial-of-service condition, an information leak, or both...

Multiple networking devices allow SNMP objects to be viewed/modified via ILMI community string

Overview There is a vulnerability in the remote management architecture for Asynchronous Transfer Mode ATM networking devices that permits unauthorized access to configuration information. An attacker who gains access to an affected device can read and modify its configuration, creating a...

Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String

Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String source: https://www.securityfocus.com/bid/2802/info Olicom routers were previously manufactured and distributed by Olicom, a company now owned by Intel. Olicom routers provide a low-cost routing solution for small businesses. A problem...

Solaris /usr/lib/dmi/snmpXdmid vulnerability

Summary ------- Title: Solaris SNMP to DMI mapper daemon vulnerability Date Published: 2001-03-15 Bugtraq ID: 2417 CVE CAN: CAN-2001-0236 Class: Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Description ----------- SNMP and DMI are remote management...

Solaris 2.67.08 - snmpXdmid Buffer Overflow

Solaris 2.67.08 - snmpXdmid Buffer Overflow // source: https://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa...

Solaris 5.8 snmpd Vulnerability

Description The /opt/SUNWssp/snmpd command SNMP proxy agent is suid root and contains a buffer overflow, the problem occurs when it copy his own name argv0 to an internal variable without checking out its lenght and this causes the overflow. Vulnerable Version Sun Solaris 5.8 Technical Descriptio...

Cisco Security Advisory: Cisco IOS Software Multiple SNMP Community String Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco IOS Software Multiple SNMP Community String Vulnerabilities Revision 1.0: INTERIM For Public Release 2001 February 28 11:00 US/Eastern UTC+0500 ------------------------------------------------------------------------ Summary Multip...

Cisco IOS Software Multiple SNMP Community String Vulnerabilities

...

CVE-2001-1434

Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...

Security Advisory: Cisco IOS Software SNMP Read-Write ILMI Community String Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco IOS Software SNMP Read-Write ILMI Community String Vulnerability Revision 1.0: INTERIM For Public Release 2001 February 27 04:00 US/Eastern UTC+0500 Summary Cisco IOS software releases based on versions 11.x and 12.0 contain a defe...

Cisco IOS Software SNMP Read-Write ILMI Community String Vulnerability

...

Cisco IOS 11.x/12.0 - ILMI SNMP Community String

source: https://www.securityfocus.com/bid/2427/info IOS is the operating system designed for various Cisco devices. It is maintained and distributed by Cisco systems. A problem in the versions of IOS 11.x and 12.0 could allow unauthorized access to certain configuration variables within a Cisco...

APC WEB/SNMP Management Card (9606) Firmware 3.0 - Telnet Administration Denial of Service

source: https://www.securityfocus.com/bid/2430/info Symmetra is an Uninterruptable Power Supply manufactured by American Power Conversation Corporation APC. Symmetra supports network options that allow a remote administrator to access the system via telnet, and gather information from the power...

CVE-2001-0046

The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities...