2808 matches found
Avaya switches contains multiple undocumented accounts allowing full administrative access to the device
Overview Multiple Avaya switches do not adequately protect privileged access. Description Avaya's P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet. --- Impact A remote attacker can...
Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches
Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches 1. Problem Description Two undocummented accounts with default passwords allow access via telnet and the web interface to Cajun P550R/P580/P880/P882 switches. Both accounts give developer access to the switch. The...
HP Procurve 4000M Switch - Device Reset Denial of Service
HP Procurve 4000M Switch - Device Reset Denial of Service source: https://www.securityfocus.com/bid/5784/info When multiple Procurve switches are used interconnected, it is common for an administrator to enable a feature allowing each switch to be viewed through a single interface, accessible via...
CVE-2002-0452
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...
Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow
Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow // source: https://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file...
Security Advisory: Scanning for SSH Can Cause a Crash
-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Scanning for SSH Can Cause a Crash Revision 1.0 For Public Release 2002 June 27 16:00 UTC 0000 - --------------------------------------------------------------------------- Summary ======= While fixing vulnerabilities mentioned in the Cisco...
CVE-2002-0452
CVE-2002-0452 concerns Foundry Networks ServerIron switches where URIs are not decoded when applying a url-map rule. The root cause is improper URI decoding, which could allow an attacker to alter traffic routing so that requests are forwarded to a different server than intended. The documented i...
CVE-2002-0452
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...
Cisco CatOS Telnet Option Handling Overflow (CSCdw19195)
Some Cisco Catalyst switches, running certain CatOS based software releases, have a vulnerability wherein a buffer overflow in the telnet option handling can cause the telnet daemon to crash and result in a switch reload. This vulnerability can be exploited to initiate a denial of service DoS...
Default SNMP configuration issue with Foundry Networks EdgeIron 4802F
28-02-02 -- [email protected] "The EdgeIron family of Layer 2 switches is designed to provide wire-speed performance, superior port density, and complete standard Layer 2 feature sets at an aggressive price for Enterprise users." Problem: -------- Foundry Networks EdgeIron 4802F Fast...
CVE-2001-1097
Cisco IOS 12.0–12.2.1 devices (routers and switches) are affected by CVE-2001-1097, allowing a remote attacker to cause a denial of service via a flood of UDP packets. The vulnerability is described in the CVE/NVD entries as a network-accessible DoS condition with a partial impact on availability...
Foundry Networks ServerIron don't decode URIs
Date : 13/03/2002 . By : Frank DENIS [email protected] Vendor : Foundry Networks http://www.foundrynet.com . Product: ServerIron web switches. Summary: Vulnerability in URI parsing code allows to bypass rules. ------------------- DESCRIPTION ------------------- Foundry Networks' ServerIron Family...
CVE-2001-0751
The CVE-2001-0751 entry affects Cisco switches/routers running CBOS 2.3.8 and earlier, where predictable TCP Initial Sequence Numbers enable an attacker to spoof or hijack TCP connections. The vulnerability can allow remote connection spoofing without authentication, leading to partial confidenti...
CVE-2001-0751
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers ISN, which allows remote attackers to spoof or hijack TCP connections...
Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability ================================================================ Revision 1.0 For Public Release 2002 January 29 at 1500 UTC -...
CVE-2001-0429
CVE-2001-0429 affects Cisco Catalyst 5000 series switches (versions 6.1(2) and earlier). The issue occurs when an 802.1x frame is received on a STP blocked port and is forwarded within that VLAN, causing a network storm and a denial of service. The connected Nessus/CSCs detail the same STP/802.1x...
CVE-1999-1421
CVE-1999-1421 affects NBase switches NH208 and NH215 that run a TFTP server. The vulnerability arises from the TFTP service allowing remote attackers to influence software updates by guessing default target filenames, enabling modification of the switch or triggering a denial-of-service (crash). ...
CVE-1999-1129
CVE-1999-1129 affects Cisco Catalyst 2900 VLAN switches. Affected component: VLAN trunking/tag handling. Root cause: attackers can forge the 802.1q VLAN identifier in the trunking tag, enabling remote injection of frames into another VLAN. Impact (as per the entry): partial confidentiality, integ...