7176 matches found
CVE-2009-0473
Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
Design/Logic Flaw
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603...
CVE-2009-0474
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603...
CVE-2009-0473
The vulnerability CVE-2009-0473 affects the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module web interface, described as an open redirect that could allow remote attackers to redirect users to arbitrary websites (phishing) via unspecified vectors. Connected sources reiterate...
CVE-2009-0474
The CVE-2009-0474 entry affects the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module: its web interface can leak internal web page information and internal module information to remote attackers via unspecified vectors. This vulnerability is described across multiple sources...
CVE-2009-0472
CVE-2009-0472 is associated with multiple XSS vulnerabilities in the web interface of the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module . The connected documents confirm remote attackers can inject arbitrary web script or HTML via unspecified vectors. The exact affected s...
CVE-2009-0472
Multiple cross-site scripting XSS vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge URL redirection vulnerability
Overview The Rockwell ControlLogix 1756-ENBT/A EtherNet/IP Bridge web interface contains a URL redirection vulnerability. Description The Rockwell Logix Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge uses a web interface to display log files and status information. This web interface...
RE: DoS code for Cisco VLAN Trunking Protocol Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is Paul Oxman with Cisco PSIRT. For mitigations and workarounds, please consult the Cisco Security Response available at: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml Regards From: showrun.lee mailto:[email protected]...
Cisco VLAN Trunking Protocol Denial Of Service
/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...
Cisco - VLAN Trunking Protocol Denial of Service
/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...
Examples to explain how the targets ARP spoofing-vulnerability warning-the black bar safety net
Ethernet Sniffer sniff for network security is not a good thing, although for network administrators to track data packet and discovery of network issues, but if the vandals use of the words, of the entire network poses a serious security threat. ARP cache table assume that such a network: | E...
sniffer-detect NSE Script
Checks if a target on a local Ethernet has its network card in promiscuous mode. The techniques used are described at . Example Usage nmap -sV --script=sniffer-detect Script Output Host script results: | sniffer-detect: Likely in promiscuous mode tests: "11111111" Requires nmap stdnse string tabl...
snmp-sysdescr NSE Script
Attempts to extract system information from an SNMP service. Script Arguments snmp.version See the documentation for the snmp library. creds.service, creds.global See the documentation for the creds library. Example Usage nmap -sU -p 161 --script snmp-sysdescr Script Output | snmp-sysdescr: HP...
AIX 530007 : U821090
The remote host is missing AIX PTF U821090 which is related to the security of the package devices.common.IBM.ethernet.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
Design/Logic Flaw
Unspecified vulnerability in Cisco Intrusion Prevention System IPS 5.x before 5.18E2 and 6.x before 6.05E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service panic, and possibly bypass intended restrictions on network traffic, via a...
CVE-2008-2060
Unspecified vulnerability in Cisco Intrusion Prevention System IPS 5.x before 5.18E2 and 6.x before 6.05E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service panic, and possibly bypass intended restrictions on network traffic, via a...
CVE-2008-2060
Cisco IPS Jumbo Frame DoS (CVE-2008-2060) affects Cisco Intrusion Prevention System versions 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2 when inline mode and jumbo Ethernet support are enabled. A specific sequence of jumbo Ethernet frames on a gigabit inline-deployed platform can cause a kernel p...
AIX 610000 : U813347
The remote host is missing AIX PTF U813347 which is related to the security of the package devices.common.IBM.ethernet.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
