1769 matches found
CVE-2005-1942
Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...
arpwatch, libpcap, tcpdump security update
CentOS Errata and Security Advisory CESA-2005:421 Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. These updated packages also add support for output files larger than ...
Planet switches unauthorized access
There is a backdoor account 'superuser' with 'planet' password via any VLAN...
Planet switches - 2 серия
Добрый день. Если помните, http://www.security.nnov.ru/search/news.asp?binid=3174 Та же "закладка" присутствует в Planet WSW-2401. Тот же пользователь, тот же пароль. Проблема усугубляется тем, что управляющий IP-интерфейс доступен через ЛЮБОЙ 802.1q-VLAN, присутствующий в свитче. Это касается и...
CVE-1999-1129
Cisco Catalyst 2900 Virtual LAN VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag...
CVE-1999-1129
CVE-1999-1129 affects Cisco Catalyst 2900 VLAN switches. Affected component: VLAN trunking/tag handling. Root cause: attackers can forge the 802.1q VLAN identifier in the trunking tag, enabling remote injection of frames into another VLAN. Impact (as per the entry): partial confidentiality, integ...
vlan_security.txt
Subject: Re: VLAN Security To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, You're right this is definitively a problem. However I don't think it is related to the 802.1Q specification. Any non-trunk port should discard 802.1Q frames because non-trunk ports are just...