D-Link多款路由器产品远程安全限制绕过漏洞

BUGTRAQ ID: 65161 CVECAN ID: CVE-2013-7308 Dlink，友讯科技股份有限公司，专注于无线网络和以太网路硬件产品的设计开发。 D-Link DES-3810-28交换机（固件版本R2.20.B017）的OSPF实现中，没有考虑LSA数据库操作之前LSA数据包内存在重复的Link State ID值，这可使远程攻击者通过特制的LSA数据包，利用此漏洞造成拒绝服务（路由中断）或获取敏感的数据包信息。 0 D-Link DES-3810-28 R2.20.B017 厂商补丁： D-Link ------...

CVE-2013-7308

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...

Design/Logic Flaw

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...

CVE-2013-7308

The CVE-2013-0149 family covers OSPF LSA handling flaws across multiple vendors where duplicates of Link State ID in LSAs are not validated before LSA database operations, enabling DoS or information disclosure via crafted LSAs. Concrete examples from connected docs include: Cisco IOS/IOS-XE/NX-O...

Hackers behind TARGET data breach looking for Pro-cracker to decrypt Credit card PINs

I think you haven’t forgotten the massive data breach occurred at TARGET, the third-largest U.S. Retailer during last Christmas Holidays. People shop during Black Friday sales in which over 40 million Credit & Debit cards were stolen, used to pay for purchases at its 1500 stores nationwide in the...

HP Intelligent Management Center < 7.0 E0102 DES / ECB Weak Decryption Key

The version of HP Intelligent Management Center on the remote host is affected by a vulnerability that could allow an attacker to gain access to administrative credentials. This is due to the fact that a static decryption key is used with DES in ECB mode to store the credentials. %NASLMINLEVEL...

CVE-2013-2179

X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log into an account whose...

Null pointer dereference

X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log into an account whose...

CVE-2013-2179

X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log into an account whose...

Firefox 26 Makes Java Plugins Click-to-Play, Fixes 14 Security Flaws

Mozilla has released a major new version of Firefox, which includes fixes for more than a dozen security vulnerabilities as well as an important change that makes all Java plugins click-to-play be default. This feature prevents those plugins from running automatically on Web pages, which helps...

CVE-2013-5997

Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5998...

CVE-2013-5998

Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5997...

Information disclosure

Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5997...

Design/Logic Flaw

Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5998...

CVE-2013-5997

Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5998...

CVE-2013-5998

Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5997...

CVE-2013-5997

CVE-2013-5997 affects D-Link DES-3800 series devices running firmware prior to R4.50B58. The SSH implementation has an unspecified vulnerability that allows remote authenticated users to cause a denial of service (device hang) via unknown vectors. This CVE is distinct from CVE-2013-5998 (Web mana...

CVE-2013-5998

CVE-2013-5998 concerns a Denial of Service in the Web manager of D-Link Japan DES-3800 devices. Affected firmware before R4.50B58 allows remote attackers to cause the device to hang via unknown vectors; this is a separate issue from CVE-2013-5997 (SSH-based). Public details identify the DES-3800 ...

D-Link DES-3800 Series vulnerable to denial-of-service (DoS)

Overview DES-3800 Series provided by D-Link Japan contains a denial-of-service DoS vulnerability due to an issue in the Web manager function. Note that this vulnerability is different from JVN65312543. Hisashi Kojima, Masahiro Nakada of Fujitsu Laboratories Ltd. reported this vulnerability to IPA...

D-Link DES-3800 Series vulnerable to denial-of-service (DoS)

Overview DES-3800 Series provided by D-Link Japan contains a denial-of-service DoS vulnerability due to an issue in the implementation of SSH. Note that this vulnerability is different from JVN28812735. Hisashi Kojima, Masahiro Nakada of Fujitsu Laboratories Ltd. reported this vulnerability to IP...