mod_sqlpw Password Caching Bug

The modsqlpw module for ProFTPD caches the user id and password information returned from the mysql database when attempting to verify a password. When the "user" command is used to switch to another account, the cached password is not cleard, and the password entered is checked against the cache...

Дырка в ProFTPD (mod_sqlpw Password Caching)

Авторизованный пользоватлеь может переключиться в другого не зхная пароля...

Security Advisory: Cisco Catalyst Memory Leak Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Catalyst Memory Leak Vulnerability Revision 1.0 For Release 2000 December 6 08:00 AM US/Pacific UTC+0700 Summary A series of failed telnet authentication attempts to the switch can cause the Catalyst Switch to fail to pass traffic or accept management...

CVE-2000-0882

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...

VIGILANTE-2000010.txt

Intel Express Switch series 500 DoS 2 Advisory Code: VIGILANTE-2000010 Release Date: September 6, 2000 Systems Affected: Intel Express Switch 510T - Firmware version 2.63 - Firmware version 2.64 Intel Express Switch 520T - Firmware version 2.63 - Firmware version 2.64 Intel Express Switch 550T -...

Intel Express Switch 500 series DoS

Intel Express Switch 500 series DoS Advisory Code: VIGILANTE-2000007 Release Date: August 28, 2000 Systems Affected: Intel Express Switch 550F - Firmware version 2.63 - Firmware version 2.64 Based on the response from Intel quoted below, it is very likely that other switches from the same series...

VIGILANTE-2000007

Intel Express Switch 500 series DoS Advisory Code: VIGILANTE-2000007 Release Date: August 28, 2000 Systems Affected: Intel Express Switch 550F - Firmware version 2.63 - Firmware version 2.64 Based on the response from Intel quoted below, it is very likely that other switches from the same series...

Cisco Security Advisory: Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards Revision 1.0 For Public Release 2000 August 03 at 11:00 AM US/Eastern UTC+0400 Summary A defect in Cisco IOStm...

Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards

...

Hardware Exploit - Gets network Down

Subject: Allegro-Software-RomPager/2.10 vulnerable to Dos Attack Risk: Serious! Timescape / Advisory TS002 ------------------------------------------- Allegro-Software-RomPager is an http server which is used in network hardware like switches to provide a web interface to remotely configure your...

TopLayer layer 7 switch Advisory

Hi, I have been testing the TopLayer 2500 layer 7 switch, which can be found at www.toplayer.com. From what I was testing so far the switch looked to do great things. It even suppose to have security features to prevent DoS from icmp to other IP based filtering. I decided to do a little more...

DoS против TopLayer

При получении ICMP пакета с неправильной версией IP, фрагментированных пакетов, IP Option и пакетов с неправильной контрольной суммой ICMP коммутатор зависает...

Timbuktu v3.0 and Public LDAP Server

Timbuktu v3.0 by Netopia, for those who don't know, is a remote control software package for Windows 9x, NT, and the Macintosh that gives you GUI console access. LDAP support was recently introduced to make it easier to find machines that have Timbuktu on them in your enterprise. This is good and...

CVE-1999-0231

This CVE affects IP-Switch IMail and Seattle Labs Slmail 2.6, caused by a buffer overflow triggered by a long VRFY command. Impact: denial of service and potentially remote access. Remediation: for Seattle Labs Slmail 2.6, disable VRFY until a patch is available; for IP-Switch IMail, no fix/versi...

CVE-1999-0775

Cisco Gigabit Switch routers running IOS are affected by CVE-1999-0775 due to improper handling of the established keyword in an access list, enabling remote attackers to forward unauthorized packets. Affected software is described as Cisco Gigabit Switch routers with IOS; specific vulnerable ver...

CVE-1999-0430

CVE-1999-0430 affects Cisco Catalyst LAN switches with Catalyst 5000 supervisor software. A remote attacker can cause a denial of service by forcing the supervisor module to reload via a remote TCP interaction. Impacts are described as availability disruption (partial). The issue is documented ac...

3com_hub_vuln.txt

Subject: Re: One more 3Com SNMP vulnerability To: [email protected] Hi all, Well spotted. To be more accurate, this bug can be found on 3Com SuperStack II Port Switch Hubs running software version 2.10. The bug disappeared from version 2.12. New software versions are available at...

[SECURITY] Current versions of seyon may contain malicious code

One year ago, we have received a report from SGI that a vulnerability has been discovered in the seyon program which can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. However, the license of Seyon doesnt permit us to provide a fix, now is th...

[SECURITY] Current versions of seyon may contain malicious code

One year ago, we have received a report from SGI that a vulnerability has been discovered in the seyon program which can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. However, the license of Seyon doesnt permit us to provide a fix, now is th...

nbase.txt

The Telecom Security Group http://www.ttsg.com/TTSG/ TTSG VULNERABILITY ADVISORY Summary: Date: July 20, 1998 Subject: N-Base vulnerability Contact Address: [email protected] Result: Comprimise security of switch, or render inoperable...