Cisco Catalyst Switches Embedded HTTP Server Long HTTP Request DoS (CSCdy26428)

The remote switch is vulnerable to a buffer overflow in its embedded HTTP server. An attacker may use this flaw to make your switch reboot continuously, resulting in a denial of service. This vulnerability is documented with the CISCO bug ID CSCdy26428. C Tenable Network Security, Inc...

CVE-2002-2415

Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero null bytes sent via UDP to a running service...

CVE-2002-1229

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts 1 manuf and 2 diag with default passwords, which allows remote attackers to gain privileges...

CVE-2002-1229

The CVE-2002-1229 entry concerns Avaya Cajun switches P880, P882, P580, and P550R running firmware 5.2.14 or earlier that ship with undocumented accounts (manuf and diag) using default passwords, enabling remote privilege escalation. Connected sources corroborate that an attacker could gain privi...

CVE-2002-1229

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts 1 manuf and 2 diag with default passwords, which allows remote attackers to gain privileges...

CVE-2002-1229: Undefined Security Weakness

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts 1 manuf and 2 diag with default passwords, which allows remote attackers to gain privileges...

Avaya switches contains multiple undocumented accounts allowing full administrative access to the device

Overview Multiple Avaya switches do not adequately protect privileged access. Description Avaya's P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet. --- Impact A remote attacker can...

Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches

Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches 1. Problem Description Two undocummented accounts with default passwords allow access via telnet and the web interface to Cajun P550R/P580/P880/P882 switches. Both accounts give developer access to the switch. The...

HP Procurve 4000M Switch - Device Reset Denial of Service

HP Procurve 4000M Switch - Device Reset Denial of Service source: https://www.securityfocus.com/bid/5784/info When multiple Procurve switches are used interconnected, it is common for an administrator to enable a feature allowing each switch to be viewed through a single interface, accessible via...

CVE-2002-0452

Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...

Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow

Cisco IOS 11.x - TFTP Server Long File Name Buffer Overflow // source: https://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file...

Security Advisory: Scanning for SSH Can Cause a Crash

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Scanning for SSH Can Cause a Crash Revision 1.0 For Public Release 2002 June 27 16:00 UTC 0000 - --------------------------------------------------------------------------- Summary ======= While fixing vulnerabilities mentioned in the Cisco...

CVE-2002-0452

CVE-2002-0452 concerns Foundry Networks ServerIron switches where URIs are not decoded when applying a url-map rule. The root cause is improper URI decoding, which could allow an attacker to alter traffic routing so that requests are forwarded to a different server than intended. The documented i...

CVE-2002-0452

Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...

Cisco CatOS Telnet Option Handling Overflow (CSCdw19195)

Some Cisco Catalyst switches, running certain CatOS based software releases, have a vulnerability wherein a buffer overflow in the telnet option handling can cause the telnet daemon to crash and result in a switch reload. This vulnerability can be exploited to initiate a denial of service DoS...

Default SNMP configuration issue with Foundry Networks EdgeIron 4802F

28-02-02 -- [email protected] "The EdgeIron family of Layer 2 switches is designed to provide wire-speed performance, superior port density, and complete standard Layer 2 feature sets at an aggressive price for Enterprise users." Problem: -------- Foundry Networks EdgeIron 4802F Fast...

CVE-2001-1097

Cisco IOS 12.0–12.2.1 devices (routers and switches) are affected by CVE-2001-1097, allowing a remote attacker to cause a denial of service via a flood of UDP packets. The vulnerability is described in the CVE/NVD entries as a network-accessible DoS condition with a partial impact on availability...

CVE-2001-1097: Undefined Security Weakness

Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets...

Foundry Networks ServerIron don't decode URIs

Date : 13/03/2002 . By : Frank DENIS [email protected] Vendor : Foundry Networks http://www.foundrynet.com . Product: ServerIron web switches. Summary: Vulnerability in URI parsing code allows to bypass rules. ------------------- DESCRIPTION ------------------- Foundry Networks' ServerIron Family...

CVE-2001-0751

The CVE-2001-0751 entry affects Cisco switches/routers running CBOS 2.3.8 and earlier, where predictable TCP Initial Sequence Numbers enable an attacker to spoof or hijack TCP connections. The vulnerability can allow remote connection spoofing without authentication, leading to partial confidenti...