[SA14428] Symantec Firewall Devices SMTP Binding Configuration Bypass

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[Full-Disclosure] Apple Airport WDS DoS

Thock.com Security Advisory Problem: Apple AirPort WDS DoS Affected devices: AirPort Extreme and Airport Express. Severity: Denial of service. Author: Dylan Griffiths [email protected] Vendor Status: Fix available. Overview: Apple's AirPort devices are wireless access points, providing 802.11...

[SA13671] Symantec Nexland Firewall Appliances Three Vulnerabilities

TITLE: Symantec Nexland Firewall Appliances Three Vulnerabilities SECUNIA ADVISORY ID: SA13671 VERIFY ADVISORY: http://secunia.com/advisories/13671/ CRITICAL: Highly critical IMPACT: Security Bypass, Manipulation of data, DoS WHERE: From remote OPERATING SYSTEM: Symantec Nexland Firewall Applianc...

Denial of Service vulnerability in several Lexmark HTTP servers

Denial of Service vulnerability in several Lexmark HTTP servers. Several Lexmark network printers is shipped with a build-in HTTP server for administrative tasks. The webserver software is vulnerable to a Denial of Service attack that will force the webserver to restart and/or stop taking request...

HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload

HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload source: https://www.securityfocus.com/bid/9971/info HP Web Jetadmin is prone to an issue which may permit remote users to upload arbitrary files to the management server. This issue exists in the printer firmware upda...

NetGear WAB102

The NetGear WAB102 running firmware v1.2.3 is a dual band wireless access point. After a recent power outage I noticed that the unit reset its password to the default of '1234'. Obviously this makes it possible for someone to reconfigured it meet their needs... a significant security risk. After...

linksysDoS.txt

DigitalPranksters Security Advisory http://www.DigitalPranksters.com LinkSys EtherFast Router Denial of Service Attack Risk: Low Product: Linksys EtherFast Cable/DSL Firewall Router BEFSX41 Firmware 1.44.3 Product URL: http://www.linksys.com/products/product.asp?prid=433 Vendor Contacted: Septemb...

Linksys BEFSX41 System Log Viewer Log_Page_Num Variable Overflow DoS

The remote host seems to be a Linksys EtherFast Cable Firewall/Router. This product is vulnerable to a remote denial of service attack : if logging is enabled, an attacker can specify a long URL which results in the router becoming unresponsive. %NASLMINLEVEL 70300 Linksys EtherFast Cable/DSL...

dlinkDoS.txt

Nessus wrote a nice little plugin for it http://www.securityindex.net/dlinkrouteroverflow.nasl -- My home network uses a small 4 port broadband Dlink router 704p The firmware was updated one week ago to version 2.70 from the www.D-link.com website The following malformed URL's cause odd behavior ...

Siemens Mobile Phone Buffer overflow

====================================== --- Product : Siemens Mobile Phone --- Version : All 45 series phones --- OffSite : www.siemens-mobile.com --- Problem : Buffer Overflow. ====================================== General Description В телефонах Siemens серии 45, мною была найдена еще одна...

Weak Encryption Scheme in Telindus 112x

----------------------------------------------------------------------- Product Name: TELINDUS ADSL ROUTER 112x Severity : Low Risk Remote : No Category : Trivial encryption scheme can reveal router system password Exploit : No Vendor URL : http://www.telindus.com Author : Elia Florio Discov.-Dat...

Telindus 112x ADSL Router - Weak Password Encryption

Telindus Router series 112x has a well-know authentication problem, which lets to extract router password from a UDP-dump sniffed over 9833 port. More about this at: http://www.securiteam.com/securitynews/5DP0A2K7GY.html or http://neworder.box.sk/showme.php3?id=6730 New firmware 6.0.27, Jul/2002...

Web server vulnerability in Axis Network Cameras, Video Servers and DVRs

Date: 20 December 2002 1. Topic Web server vulnerability in Axis Network Cameras, Video Servers and Network Digital Video Recorders. 2. Description A potential stack buffer overflow has been found in the authentication code of the modified version of Boa used in some of the embedded Linux based...

Hewlett Packard JetDirect-enabled printers disclose Telnet/HTTP passwords in hex format via "SNMP READ" request

Overview Hewlett Packard HP printers store sensitive administrative account information in a variable that is served to any user that makes a certain SNMP request. Description HP JetDirect-enabled printers are configurable via HTTP and Telnet and accept SNMP requests. These printers store the...

Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router Date: 27-05-2002 Impact: A vulnerability in PAT Port Address Translation allow access to all ports in the computer behind the router. Author: Ismael Briones Vilar [email protected]...

Netscreen 25 unauthorised reboot issue

Please note that this advisory was prepared, before speaking to Netscreen's US operation. Nothing of this vulnerability has been discussed here or on vun-dev hence this email. Additionally it is not shown on netscreen's security alerts page http://www.netscreen.com/support/alert.html as of...

KPMG-2002007: Watchguard SOHO Denial of Service

-------------------------------------------------------------------- -=Watchguard SOHO Denial of Service=- Brought to you by KPMG Denmark BUG-ID: 2002007 Released: 08th apr, 2002 -------------------------------------------------------------------- Problem: ======== Sending TCP traffic with bad IP...

ZyXEL ZyWALL10 DoS

vendor status About half a year ago I found a 'funny' DoS condition in the ZyWALL10. ZyXEL was informed, and they at least confirmed the bug, but i believe that's all i heard. According to www.zyxel.com a new firmware for the ZyWALL10 was released 2002/01/10 - i wrote an email to a ZyXEL employee...

NetScreen ScreenOS 2.6 Subject to Trust Interface DoS

Problem: NetScreen ScreenOS 2.6.1 subject to Trust Interface DoS Attack Company Info: NetScreen Technologies are the manufacturers of some of the industry's highest quality VPN and firewall equipment. For more information please see http://www.netscreen.com. What's affected: The ScreenOS is the...