CVE-2007-2343

Affected products: Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1. Component vulnerable: TFTPD. Root cause: stack-based buffer overflow. Impact: remote attackers can execute arbitrary code via crafted requests containing long file names; network-based exploit with high impact (...

CVE-2007-2344

The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service daemon crash via a UDP packet that contains an invalid "packet type" field...

CVE-2007-2344

The CVE-2007-2344 entry concerns the BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1 (and possibly earlier) running on Windows. A remote attacker can cause a denial-of-service (daemon crash) by sending a UDP packet with an invalid “packet type” field. The ava...

Enterasys Dragon Enterprise Reporting detection

The remote host is running the Enterasys Dragon Enterprise Reporting on this port. OpenVAS Vulnerability Test $Id: enterasysdragonreportingdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Enterasys Dragon Enterprise Reporting detection Authors: David Maciejak Copyright: Copyright C 200...

Enterasys Dragon Enterprise Reporting Detection (HTTP)

HTTP based detection of Enterasys Dragon Enterprise Reporting. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-2026

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges...

CVE-2005-2027

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry...

CVE-2005-2027

The affected product is Enterasys Vertical Horizon VH-2402S. Vulnerable component: firmware handling of debugging commands. Root cause: firmware prior to 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account. Impact: attackers could obtain sensitive information or ...

CVE-2005-2026

The CVE-2005-2026 entry concerns Enterasys Vertical Horizon VH-2402S. A firmware issue (before 2.05.05.09) exposes a hard-coded account and password used for debugging, enabling remote attackers to gain privileges. The available connected documents confirm the product and version range and the ro...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

[Full-disclosure] Undocumented account vulnerability in Enterasys Vertical Horizon switches

Problem Description An undocumented account with a default password exists, additionally guest users can DoS the switch. 2. Tested systems The following versions were tested and found vulnerable: Vertical Horizon VH-2402S with firmware 02.05.00 Vertical Horizon VH-2402S with firmware 02.05.09.07...

Enterasys Dragon Enterprise Reporting Detection

The reporting console for Dragon, a network intrusion detection system distributed by Enterasys, is running on this port. C Tenable Network Security, Inc. Changes by Tenable: - Changed family 8/31/09 - rewritten 2009-11-17 include"compat.inc"; ifdescription scriptid18532; scriptversion"2.9";...

CVE-2005-2026

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges...

CVE-2005-2027

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry...

CVE-2002-1501

The CVE-2002-1501 entry concerns Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10, where the MPS functionality is vulnerable to remote denial of service through multiple port scans to ports 15077 and 15078. The provided documents reiterate the affected product/versions and the cra...

CVE-2002-1501

The MPS functionality in Enterasys SSR8000 Smart Switch Router before firmware 8.3.0.10 allows remote attackers to cause a denial of service crash via multiple port scans to ports 15077 and 15078...

CVE-2004-0674

Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...

CVE-2004-0674

CVE-2004-0674 affects Enterasys XSR-1800 series Security Routers running firmware 7.0.0.0 with Policy-Based Routing. A remote attacker can cause a denial of service (crash) by sending a packet with the IP record route option set. The NVD entry shows a base score of 5.0 (medium) with network attac...

CVE-2004-0674

Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...

Enterasys XSR Security Routers DoS

Description: Enterasys XSR Security Routers crash when passing a packet with the option record route. System Vulnerable: This vulnerability was found in XSR-1800 series. firmware 7.0.0.0 Proof-of-concept: I've used Hping http://www.hping.org/ to perform this example: hping3 -1 -G www.uol.com.br...