CVE-2005-3426

Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services is affected by CVE-2005-3426. The vulnerability allows remote attackers to trigger a denial of service via memory corruption during SSL session negotiation when a malformed client certificate is presented. The entry notes...

CVE-2005-3426: Undefined Security Weakness

Cisco CSS 11500 Content Services Switch CSS with SSL termination services allows remote attackers to cause a denial of service memory corruption and device reload via a malformed client certificate during SSL session negotiation...

CVE-2004-2502

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcherPID temporary file...

CVE-2004-2502

CVE-2004-2502 : The vulnerability affects im-switch before 11.4-46.1 on Fedora Core 2, where a symlink race on the imswitcher[PID] temporary file allows a local user to overwrite arbitrary files. The root cause is a race condition involving the temporary file used by im-switcher, enabling tamperi...

CVE-2004-2502: Undefined Security Weakness

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcherPID temporary file...

CVE-2005-2742: Undefined Security Weakness

SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to...

VLAN Membership Policy Server Detection

The remote host is running a VLAN Management Policy Server VMPS, which is used for assigning switch ports to specific VLANs based on the MAC address of connecting device. C Tenable Network Security include"compat.inc"; if description scriptid20066; scriptversion"1.9"; scriptcvsdate"Date:...

Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability

...

Cisco Content Switch SSL DoS

Memory corruption on malformed certificate handling...

CVE-2005-3196

CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...

Cisco Content Services Switch authentication bypass

In case of SSL authentication client can be granted access on SSL reauthentication...

[SA16761] Cisco CSS SSL Authentication Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2005-2149

config.php in Cacti 0.8.6e and earlier allows remote attackers to set the nohttpheaders switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks...

Allied Telesyn Router/Switch Web Interface Default Password

The Allied Telesyn Router/Switch has the default password set. The attacker could use this default password to gain remote access to your switch or router. This password could also be potentially used to gain other sensitive information about your network from the device. C Tenable Network...

Bay Networks Accelar 1200 Switch Default Password (password) for 'usrname' Account

The remote device appears to be a Bay Networks Accelar 1200 Switch that can be accessed using default credentials. An attacker could leverage this issue to gain administrative access to the affected device. This password could also be potentially used to gain other sensitive information about the...

[SA15393] Cisco Various Products TCP Timestamp Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

kernel security update

CentOS Errata and Security Advisory CESA-2005:294 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the fifth regular update. The Linux kernel handles the basic functions of the operating system. This is the fifth...

CVE-2004-1970

CVE-2004-1970 describes a vulnerability in Samsung SmartEther SS6215S switches (and possibly other Samsung switches) where an attacker can gain administrative access by submitting an admin username followed by a password of maximum allowed length, then pressing Enter after the resulting error mes...

CVE-2004-1793

CVE-2004-1793 describes a stack-based buffer overflow in swnet.dll of YaSoft Switch Off (versions 2.3 and earlier). The vulnerability allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. Affected component: swnet.dll within Ya...