2302 matches found
Cisco Catalyst switches allow access to "enable mode" without password
Overview Cisco Catalyst OS 7.51 contains a vulnerability that allows anyone who can obtain command line access to gain "enable" mode access without knowledge of the "enable" password. Description Cisco Catalyst OS is an operating system for Cisco's line of Catalyst switches. Version 7.51 of...
CVE-2003-0216
Unknown vulnerability in Cisco Catalyst 7.51 allows local users to bypass authentication and gain access to the enable mode without a password...
Cisco Catalyst CatOS Authentication Bypass Vulnerability
Description A vulnerability has been reported for Cisco Catalyst switches that may result in unauthorized access to the enable level. The vulnerability exists due to the way the 'enable' mode is accessed through the switch. An attacker who is able to obtain command line access to a vulnerable...
PHP 4.3 - 'socket_iovec_alloc()' Integer Overflow
source: https://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out sanity checks on user-supplied...
Unpassworded 'friday' Account
The account 'friday' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "friday"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11254; scriptversion"1.35";...
Sun iPlanet Web Server Buffer Overflow (#NISR09072002)
NGSSoftware Insight Security Research Advisory Name: iPlanet Search Buffer Overflow Systems: iWS 6.0 and iWS 4.1 Severity: High Risk if Search enabled Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.iplanet.com/ Author: David Litchfield [email protected] Advisory URL:...
Ошибка форматной строки в lynx при работе с логами (format string)
Ошибка форматной строки при работе с syslog если lynx собран с опцией --enable-syslog...
Cisco PIX Firewall Manager stores enable password in plain text
Overview A vulnerability exists in the way the Cisco Pix Firewall Manager stores authentication credentials which could allow local attackers to have read access to the enable password for the Cisco Pix Firewall. Description The PIX Firewall Manager PFM is a software package designed to allow...
Cisco - Password Bruteforcer
Cisco - Password Bruteforcer / .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in login-pass on...
Cisco Password Bruteforcer Exploit
Exploit for hardware platform in category remote exploits ================================== Cisco Password Bruteforcer Exploit ================================== / .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just lo...
Cisco - Password Bruteforcer
/ .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in login-pass ones and has been succesfully...
ecurity Advisory: Cisco IOS HTTP Server Query Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco IOS HTTP Server Query Vulnerability Revision 1.0 For public release 2000 October 25 at 08:00 US/Pacific UTC+0700 Summary A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is...
Cisco IOS 12 - Software ? HTTP Request Denial of Service
Cisco IOS 12 - Software ? HTTP Request Denial of Service source: https://www.securityfocus.com/bid/1838/info Cisco devices running IOS software may be prone to a denial of service attack if a URL containing a question mark followed by a slash ?/ is requested. The device will enter an infinite loo...
MS IE5 + ftp proxy
Problem: IE5 doesn't use proxy for FTP connection if option "Enable folder view for FTP sites" is checked. This option is checked by default. Configuration: tested in 2 configurations: 1. Windows NT 4.0 wrkst + SP5 + IE5.0 2. Windows NT 4.0 wrkst + SP6a + IE5.01 both has a problems. There is no...
CVE-2000-0267
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password...
И еще одна проблема в Cisco IOS
По команде show в не-enable режиме тем не менее доступны многие команды, документированные как команды enable-режима, например show access-list...
CVE-2000-0267
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password...
Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability
Cisco Catalyst Enable Password Bypass Vulnerability Revision 1.1 Tentatively for release 2000 April 19 08:00 AM US/Pacific UTC+0700 --------------------------------------------------------------------------- Summary ======= Cisco Catalyst software permits unauthorized access to the enable mode in...
Cisco Catalist позволяет любому пользователю получить администраторские привелегии.
В версии П/О 5.41 можно обойти проверку enable-пароля. Исправлено в 5.42...
oce9400.txt
This appeared on bugtraq in August of 99 I am aware of the Intelligent Peripherals bulletin by CIAC. http://www.ciac.org/ciac/bulletins/j-019.shtml I have a few plotters / printers under my audit umbrella and noticed something interesting on an Oce' 9400 plotter. The printer has the ability to be...