SNMP cascade Community String (deprecated)

Binary data 1417.prm...

SNMP all Community String (deprecated)

Binary data 1356.prm...

SNMP cable-docsis Community String (deprecated)

Binary data 1410.prm...

security flaw

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...

PT-2004-1727 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.15 through 0.10.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a process crash. This can be achieved via a malformed or missing community string, which causes an out-of-bounds...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure source: https://www.securityfocus.com/bid/10589/info BT Voyager 2000 Wireless ADSL Router is reported prone to a sensitive information disclosure vulnerability. It is reported that 'public' SNMP MIB community...

US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-111A archive Vulnerabilities in TCP Original release date: April 20, 2004 Last revised: -- Source: US-CERT Systems Affected Systems that rely on persistent TCP connections, for example routers supporting BGP Overvie...

CVE-2004-0312

Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2...

SNMP information leak in Linksys

It's possible to retrieve all community strings...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings may be disclosed to a remote...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base communi...

SNMP community string disclosure in Linksys WAP55AG

Linksys WAP55AG does not properly secure SNMP community strings. In particular, it is possible to obtain all community strings, including read/write, by querying OID 1.3.6.1.4.1.3955.2.1.13.1.2. 1.3.6.1.4.1.3955.2.1.13.1.2.1 = STRING: "public" 1.3.6.1.4.1.3955.2.1.13.1.2.2 = STRING: "private"...

osCommerce 2.2-MS2 - Multiple Vulnerabilities

osCommerce 2.2-MS2 - Multiple Vulnerabilities Source: http://gulftech.org/advisories/osCommerce%20Multiple%20Vulnerabilities/19 osCommerce Multiple Vulnerabilities Vendor: osCommerce Product: osCommerce Version: = 2.2-MS2 Website: http://www.oscommerce.com BID: 9275 9277 Description: osCommerce i...

[SCSA-022] Multiple vulnerabilities in Xoops

====================================================================== Security Corporation Security Advisory SCSA-022 Multiple vulnerabilities in Xoops ====================================================================== PROGRAM: Xoops HOMEPAGE: http://www.xoops.org VULNERABLE VERSIONS:...

Avaya Argent Office uses weak SNMP authentication mechanism

Overview The Avaya Argent Office does not properly enforce SNMP community string values, resulting in a weakened access control mechanism. Description The Avaya Argent Office does not properly enforce SNMP community string values. It will accept a null string i.e. as a valid community string and...

Compaq Web-enabled Management Software Default Account

The Compaq Web-based Management / HP System Management Agent active on the remote host is configured with the default, or a predictable, administrator password. Depending on the agents integrated, this allows an attacker to view sensitive and verbose system information, and may even allow more...

Admin Access Vulnerability in Community Wizard

Admin Access Vulnerability in Community Wizard Affected Systems: Community Wizard version: 5.1 and possibly earlier versions Vendor: http://www.sepcity.com , http://www.commwiz.com Issue: gain admin access Released: 18 September 2003 Introduction: ============= "Community Wizard allows anyone to...

phpWebSite SQL Injection & DoS & XSS Vulnerabilities

phpWebSite SQL Injection & DoS & XSS Vulnerabilities ------ PRODUCT: phpWebSite VENDOR: Appalachian State University VULNERABLE VERSIONS: - 0.9.x - 0.8.x - 0.7.x - And older versions. NO VULNERABLE VERSIONS - ? --------------------- Description: phpWebSite provides a complete web site content...

Critical Vulnerabilities In Max Web Portal

Multiple Vulnerabilities In Max Web Portal ------------------------------------------ Discovery Date: 05/2003 Versions Vuln : All? / 1.30 Author's URL : http://www.maxwebportal.com http://www.maxcanada.ca Notify Status : Patch Available / Upgrade Product Description...