Cisco 6509 switch telnet vulnerability

A vulnerability has been found on Cisco 6509 switches. The vulnerability was found to work on 2 different Cisco 6509 switches running CATOS 5.42 and 5.52. The vulnerability can lead to information and commands being exectued on the remote switch from the login prompt. Commands can be exectued at...

Cajun Switch Negative Integer Handling Remote DoS

The remote host appears to be a Avaya Cajun switch. It was possible to crash it by sending a malformed string to TCP port 4000. These attacks disable the switch for thirty seconds. A remote attacker could use this to repeatedly disable the switch, affecting network availability. C Tenable Network...

Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service Vulnerability =============================================================================== Revision Numeral 1.0 For Public Releas...

HP-UX utilities buffer overflow

Buffer overflow in oversized rexec -l switch in combination with -n, rwrite, kermit...

Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service Vulnerability

...

CVE-2002-1426

HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service crash via an SNMP write request containing 85 characters, possibly triggering a buffer overflow...

CVE-2002-1426

CVE-2002-1426 affects the HP ProCurve Switch 4000M (firmware version C.07.23). The vulnerability allows remote attackers to cause a denial of service (crash) by sending an SNMP write request containing 85 characters, which may trigger a buffer overflow. The connected documents provide the impact ...

[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood

-------------------------------------------------------------------------- Debian Security Advisory DSA 245-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28th, 2003 http://www.debian.org/security/faq -...

DSA-245 dhcp3 - ignored counter boundary

Bulletin has no description...

Allied Telesyn switches & routers vulnerability

Hello, all The problem: Zero stream DoS switch! We have tested switches of Allied Telesyn, 8024 and Rapier24. We have installed the latest firmware from AT site. Testing: 1. Scan for open ports on switch assume switch address 192.168.0.13: nmap -v -sT 192.168.0.13 Starting nmap V. 2.54BETA22...

HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability

Techserve, Inc. www.tech-serve.com Security Advisory Advisory Name: HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability Release Date: 09/23/2002 Platform: HP Procurve 4000M Switch J4121A Application: Firmware revision C.09.13 Current Severity: Multiple reset requests may deny use of stacked...

HP Procurve 4000M Switch - Device Reset Denial of Service

source: https://www.securityfocus.com/bid/5784/info When multiple Procurve switches are used interconnected, it is common for an administrator to enable a feature allowing each switch to be viewed through a single interface, accessible via the web. It has been reported that HP Procurve Switches a...

Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service

Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service source: https://www.securityfocus.com/bid/5703/info The SSR8000 is a SmartSwitch distributed and maintained by Enterasys. It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned...

Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service

source: https://www.securityfocus.com/bid/5703/info The SSR8000 is a SmartSwitch distributed and maintained by Enterasys. It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned using specific types of TCP traffic, and scanned on certain...

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability CVE-2001-0622 was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface,...

CVE-2002-1077

IPSwitch IMail Web Calendaring service iwebcal allows remote attackers to cause a denial of service crash via an HTTP POST request without a Content-Length field...

CVE-2002-0870

Cisco CSS 11000 series WebNS web management service (pre-WebNS 4.01B29s/4.10B17s) is vulnerable to an authentication bypass that lets a remote attacker obtain additional privileges by requesting the web management URL directly, possibly via a variant of the original attack (Cisco bug CSCdw08549)....

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability CVE-2001-0622 was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface,...

Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability Revision 2.0 For Public Re-release 2002 August 14 at 1500 UTC For Public Release 2001 May 31 at 1500 UTC...

Cisco Content Service Switch unauthorized access

It's possible to access administrative interface without authentication...