HP-UX PHSS_26138 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.X OV EMANATE14.2 Agent Consolidated Patch : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS26138. The text itself is copyright C Hewlett-Packar...

HP-UX PHSS_27274 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.00 OV DM5.03 Intermediate Patch June2002 : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27274. The text itself is copyright C Hewlett-Packard...

Nortel Multiple Default Accounts

It is possible to log into the remote host by using a default set of credentials. An attacker may use these to gain access to the remote host. These credentials are commonly found on Nortel Accelar routing switches. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption)

This is a modified advisory about the specific Brocade case. Product : all Brocade fiber channel switches running pre-3.2 code including Silkworm 3800, Silkworm 3200 and Silkworm 2800. Vuln. : Remotely exploitable denial of service Date : 09/05/2004 Author : Frank Denis [email protected], tested by...

CVE-2002-1222

Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service reset via a long HTTP request...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 with AOS 5.1.1 contains a backdoor Telnet server on TCP 6778 that was left in code from development, allowing remote privileged access. Affected devices can be compromised to gain full admin control. Remediation per CERT/vendor guidance: upgrade to AOS 5.1.1.R02 or 5....

CVE-2002-1222

The CVE-2002-1222 entry describes a vulnerability in Cisco Catalyst switches running CatOS 5.4–7.3 where the embedded HTTP server is vulnerable to a buffer overflow. An unauthenticated remote attacker can trigger a denial of service (reset/reboot) by sending a long HTTP request, as indicated by t...

CVE-2004-0551

Cisco CatOS TCP-ACK handling vulnerability (CVE-2004-0551) affects CatOS on Cisco Catalyst switches: 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX. A remote attacker can cause a denial of service (system crash/reload) by sending invalid packets instead of the final ACK in the TCP thr...

CVE-2004-0551: Undefined Security Weakness

Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...

[security bulletin] SSRT4696 rev. 0 HP ProCurve Routing Switches TCP Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBGN01041 REVISION: 0 SSRT4696 rev.0 HP ProCurve Routing Switches TCP Denial of Service DoS ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

Samsung switches unauthorized access

Administrativ access without knowledge of admin password is possible...

not_so_smartether.txt

There is a vulnerability within the OS that this and other samsung managed switches. The problem resides in the way that the admin user is authenticated when trying to login using telnet remote or from console local. Now just so everyone who reads this knows, I am not that up to date on all of...

CVE-2004-0352

The vulnerability CVE-2004-0352 affects Cisco 11000 Series Content Services Switches running WebNS. Specifically, WebNS 5.0(x) before 05.0(04.07)S and 6.10(x) before 06.10(02.05)S are susceptible. A remote attacker can trigger a denial of service (device reset) by sending a malformed UDP packet t...

CVE-2004-0352: Undefined Security Weakness

Cisco 11000 Series Content Services Switches CSS running WebNS 5.0x before 05.004.07S, and 6.10x before 06.1002.05S allow remote attackers to cause a denial of service device reset via a malformed packet to UDP port 5002...

CVE-2003-1507

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access...

Planet switches - 2 серия

Добрый день. Если помните, http://www.security.nnov.ru/search/news.asp?binid=3174 Та же "закладка" присутствует в Planet WSW-2401. Тот же пользователь, тот же пароль. Проблема усугубляется тем, что управляющий IP-интерфейс доступен через ЛЮБОЙ 802.1q-VLAN, присутствующий в свитче. Это касается и...

Denial of service in Cajun P13x/P33x switch family firmware 3.x

Problem Description There exists a denial of service attack in the AVAYA Cajun P33x and P13x switch family with firmware versions 3.x. It is possible to stop the switch for 30 seconds. By repeating the attack access can be denied for arbitrarily long periods of time. 2. Tested systems The...

Avaya Cajun P130P133P330P333 Network Switch - Connection Stalling Denial of Service

Avaya Cajun P130P133P330P333 Network Switch - Connection Stalling Denial of Service source: https://www.securityfocus.com/bid/7961/info It has been reported that Cajun switches do not properly handle traffic to port 4000. Because of this, an attacker may be able to cause the switch to stall for...

Avaya Cajun P130/P133/P330/P333 Network Switch - Connection Stalling Denial of Service

source: https://www.securityfocus.com/bid/7961/info It has been reported that Cajun switches do not properly handle traffic to port 4000. Because of this, an attacker may be able to cause the switch to stall for period of time. The following proof of concept string has been made available: \x80du...

Thunderstone TEXIS 3.0 - texis.exe Information Disclosure

Thunderstone TEXIS 3.0 - texis.exe Information Disclosure source: https://www.securityfocus.com/bid/7105/info Thunderstone TEXIS is prone to an information-disclosure vulnerability. Under certain circumstances, an attacker may pass command-line switches as URI parameters to the TEXIS executable...