Lucene search
+L

111 matches found

NVD
NVD
added 2018/04/18 4:29 p.m.25 views

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

8CVSS7.7AI score0.00539EPSS
SaveExploits1References1
CVE
CVE
added 2018/04/18 4:00 p.m.55 views

CVE-2018-1240

Dell EMC ViPR Controller (versions after 3.0.0.38) contains an information exposure in VRRP due to keepalived’s insecure default configuration, causing the cluster password to be sent in plaintext via multicast. A malicious user with access to the vCloud subnet could sniff the password and reuse ...

8CVSS7.6AI score0.00539EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/04/18 4:00 p.m.30 views

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

7.7AI score0.00539EPSS
SaveExploits1References1
zdt
zdt
added 2018/04/17 12:00 a.m.51 views

Dell EMC ViPR Controller Information Exposure Vulnerability

Exploit for linux platform in category dos / poc DSA-2018-071: Dell EMC ViPR Controller Information Exposure Vulnerability Dell EMC Identifier: DSA-2018- 071 CVE Identifier: CVE-2018-1240 Severity: Medium Severity Rating: CVSS v3 Base Score: 5.4 AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H Affected...

0.00539EPSS
SaveExploits1
n0where
n0where
added 2016/01/13 3:23 a.m.38 views

Network Security Policy Compiler: Netspoc

Netspoc is free software to manage all the packet filter devices inside your network topology. Filter rules for each device are generated from one central ruleset, using a description of your network topology. Netspoc generates ACLs and static routes for a given network policy, consisting of a se...

7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2014/10/17 12:00 a.m.37 views

Cisco MDS 9000 VRRP DoS (CSCte27874)

The remote host is an MDS 9000 series router. It is, therefore, vulnerable to a denial of service vulnerability. A flaw with Virtual Router Redundancy Protocol VRRP frame handling allows a remote attacker, using a specially crafted VRRP frame with an Authentication Header AH, to cause the device ...

5CVSS5.6AI score0.01901EPSS
SaveExploits0References3
NVD
NVD
added 2013/11/08 4:47 a.m.35 views

CVE-2013-5566

Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service supervisor CPU consumption via Authentication Header AH authentication in a Virtual Router Redundancy Protocol VRRP frame, aka Bug ID CSCte27874...

5CVSS6.9AI score0.01901EPSS
SaveExploits0References2
Prion
Prion
added 2013/11/08 4:47 a.m.27 views

Authentication flaw

Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service supervisor CPU consumption via Authentication Header AH authentication in a Virtual Router Redundancy Protocol VRRP frame, aka Bug ID CSCte27874...

5CVSS7.5AI score0.01901EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2013/11/08 2:00 a.m.37 views

CVE-2013-5566

Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service supervisor CPU consumption via Authentication Header AH authentication in a Virtual Router Redundancy Protocol VRRP frame, aka Bug ID CSCte27874...

6.9AI score0.01901EPSS
SaveExploits0References2
Cisco
Cisco
added 2013/11/06 8:30 p.m.25 views

Cisco MDS 9000 NX-OS Software Denial of Service Vulnerability

A vulnerability in the supervisor of the Cisco MDS Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of Virtual Router Redundancy Protocol VRRP frames. An attacker could exploit this vulnerability by...

5CVSS2.6AI score0.01901EPSS
SaveExploits0References1
OSV
OSV
added 2011/05/20 10:55 p.m.9 views

UBUNTU-CVE-2011-1784

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

3.6CVSS5.9AI score0.00367EPSS
SaveExploits0References3
Rows per page
Query Builder