RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0

Dear all, for your information. ------------------------------------------------------------------------ RUS-CERT Security Announcement 2007-06:01 1380 ================================================ The built-in Mini Switch in Alcatel-Lucent's IP-Touch Telephones under OmniPCX Enterprise 7.0 an...

Alcatel-Lucent OmniPCX 7.0 VLAN information leak

Broadcast and multicast packets cross VLAN boundaries...

Design/Logic Flaw

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

CVE-2007-2512 affects Alcatel-Lucent OmniPCX Enterprise Release 7.0 and later, where the built‑in mini switch on IP-Touch phones is enabled by default. This allows unauthenticated access to the voice VLAN through a daisy‑chained computer system, effectively bypassing 802.1x in some scenarios and ...

IP and MAC bundle cracked-vulnerability warning-the black bar safety net

Our school recently the MAC and IP for the bundle, but also in Server 2K on the Internet time restrictions, really annoying dead, I think I'm the one never subject to the limit of the people Ah, how can like this without a fight! The ancient saying goes,“there policies, under the measures”, then...

CVE-2005-4826

Unspecified vulnerability in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.122EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service device reboot via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-47...

多个Cisco交换机VLAN中继协议报文处理拒绝服务漏洞

VLAN中继协议（VTP）是Cisco的私有协议，用于集中管理VLAN。 Cisco交换机在处理某些畸形VTP报文时存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务。 如果接收到了畸形的VTP报文的话，某些交换机设备就可能重载。但攻击者必须要知道VTP域名并将畸形的VTP报文发送给交换机上所配置的用于中继的端口才能利用这个漏洞。 Cisco Catalyst 3750 Cisco Catalyst 3550 Cisco Catalyst 3500XL Cisco Catalyst 2955 Cisco Catalyst 2950 Cisco Catalyst 2900XL...

Re: [Full-disclosure] S21sec-034-en: Cisco VTP DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello - Cisco has posted a Security Response in reference to this issue at the following URL: http://www.cisco.com/warp/public/707/cisco-sr-20070129-vtp.shtml Cisco Response ============== An issue has been reported to the Cisco PSIRT involving...

CVE-2006-6717

The CVE-2006-6717 entry affects the Allied Telesis AT-9000/24 Ethernet switch. The vulnerability arises because the device accepts management packets from arbitrary VLANs, contrary to documentation, enabling remote attackers to reach the switch from unexpected locations. The impact is described i...

Allied Telesis AT-9000/24 ethernet switche unauthorized access

Administration interface may be accessed from any VLAN...

Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.

Overview The AT-9000/24 Ethernet switch's management can be accessed from any VLAN which has been configured to switch. Normally remote management SNMP, telnet, http should be only available from management VLAN and with AT-9000/24 this can't be chosen. Only option for the management VLAN is...

[SA22818] 3Com SuperStack 3 Switch 4400 Information Disclosure

TITLE: 3Com SuperStack 3 Switch 4400 Information Disclosure SECUNIA ADVISORY ID: SA22818 VERIFY ADVISORY: http://secunia.com/advisories/22818/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network OPERATING SYSTEM: 3Com SuperStack 3 Switch 4400 Family...

Cisco IOS contains buffer overflow in VTP VLAN name handling

Overview Cisco IOS fails to properly handle specially crafted VTP summary advertisement with overly long VLAN name. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Cisco's VLAN Trunking Protocol VTP...

Cisco IOS fails to properly verify the VTP configuration revision number

Overview Cisco IOS fails to properly verify the VTP configuration revision number. This vulnerability may allow a remote, unauthenticated attacker to prevent changes to the VLAN database from being properly propagated throughout the VTP domain. Description Cisco's VLAN Trunking Protocol VTP...

CVE-2006-4776

Heap-based buffer overflow in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement...

CVE-2006-4776

Heap-based buffer overflow in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement...

Re: Cisco IOS VTP issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 13, 2006 at: http://www.securityfocus.com/archive/1/445896/30/0/threaded and entitled "Cisco Systems IOS VTP multiple vulnerabilities". An official...

[email protected], [email protected], [email protected]

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +---+ Title Cisco Systems IOS VTP multiple vulnerabilities Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoVTP.txt Affected Products Cisco IOS and CatOS Tested on: C3550 IOS 12.1...