DLINK 614+, script injection vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Security flaw in DLINK 614+ - SOHO routers http://www.dlink.com TYPE: Script injection over DHCP QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments, utilizing their...

Linksys BEFSR41 DHCP vulnerability server leaks network data

On May 2nd 2004 I sent an email detailed below to Linksys concerning this vulnerability. Linksys has posted the vulnerability and a fix for the Revision 3 router since then here:...

Netgear WG602 Accesspoint vulnerability

KHAMSIN Security News KSN Reference: 2004-06-03 0001 TIP --------------------------------------------------------------------------- Title ----- The Netgear WG602 Accesspoint contains an undocumented administrative account. Date ---- 2004-06-03 Description ----------- The webinterface which is...

D-Link 704p Web Interface syslog.htm Malformed Query Remote DoS

The remote host is a D-Link router running a firmware version older than, or as old as 2.70. There is a flaw in this version which may allow an attacker to crash the remote device by sending an overly long argument to the 'syslog.htm' page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref...

SonicWall Pro DoS?

Came across an apparent problem on a SonicWall Pro running firmware version 6.4.0.1 ROM version 5.0.1.0 during a vulnerability assessment and couldn't find any other postings on this problem so fwiw.. the problem occurs when sending a large HTTP POST to the inside interface - may affect others ju...

[VulnWatch] Efficient Networks 5861 DSL Router

Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 Latest firmware Advisory date: 10/01/2003 Severity: Moderate Background "Efficient Networks® Business Class IDSL, ADSL, or SDSL Routers provide DSL access for up to 100 or more users with...

iDEFENSE Security Advisory 11.19.02a: Denial of Service Vulnerability in Linksys Cable/DSL Routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.19.02a: http://www.idefense.com/advisory/11.19.02a.txt Denial of Service Vulnerability in Linksys Cable/DSL Routers November 19, 2002 I. BACKGROUND Linksys Group Inc. currently sells several broadband router products,...

Linksys router vulnerability

SUMMARY: Linksys products running affected firmware versions are susceptible to a bug that allows unauthenticated access to the management interface. This bug affects both local and remote management if enabled. AFFECTED PRODUCTS per Linksys support: BEFSR41, BEFSR11, BEFSRU31: firmware versions...

iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.31.02a: http://www.idefense.com/advisory/10.31.02a.txt Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router October 31, 2002 I. BACKGROUND Linksys Group Inc.’s EtherFast Cable/DSL Router with 4-Po...

CISCO as5350 crashes with nmap connect scan

I have managed to "reduplicate" at least five times the following scenario with a cisco as5250, with firmwrare 12.2 11t release firmware of cisco: nmap -dinsane -p 1-65535 ip.of.as5350 This causes a "hard" lockup, and the device must be powered off in order to have functionality restored to it...

TCP flood against NetGear FM114P

Hi! I've got a lot of availability trouble with my NetGear FM114P. After asking the support and no good answer I started doing some test for myself. It seems possible to crash the NetGear FM114P with many TCP connects. I did some tests on my FM114P firmware Version 1.3 Release 05 and these are th...

Telindus 1100 Series Router - Administration Password Leak

// source: https://www.securityfocus.com/bid/4946/info The 1100 series routers are a broadband connectivity solution distributed by Telindus. Under some circumstances, a vulnerable Telindus router may leak sensitive information. When an attempt to connect to the router is made using the...

CVE-2001-1137

D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service reboot via malformed IP datagram fragments...

DoS on HP ProCurve 4000M switch (possibly others)

Advisory Vitals: Name: HP ProCurve 4000M nmap DoS Affected Products: HP ProCurve 4000M J4121A, possibly others Firmware Versions: C.08.22 and C.09.09 both tested vulnerable Relevant Vendor URL: http://www.hp.com/rnd/ Vendor Contacted: 9/10/2001; 1/16/2002 Summary: nmap portscans cause a DoS on th...

Watchguard SOHO 2.2 - Denial of Service

Watchguard SOHO 2.2 - Denial of Service source: https://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to...

DoS in Sonicwall SOHO firewall

Hi, i was just playing a bit with a Sonicwall SOHO firewall, to verify performances and security of the product. I've noticed that using a very long string some hundreds of chars as the User Name in the auth page of the Sonicwall web server, the firewall reacts strangely: it begins to refuse...

Netopia ISDN Router 650-ST: Viewing of all system logs without login

This advisory was sent to Netopia three weeks ago. I have received no return contact. Andrew ---------------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Device Specifics ================= Name: Netopia ISDN Router 650-ST Manufacturer: Netopia Version: Firmware 3.3.2 Risk: Viewing of all system...

DoS in Intel corporation 'InBusiness eMail Station'

Intel corporation 'InBusiness eMail Station' firmware version 1.04.87 latest Denial of service vulnerability. Vendor notification date: 20/10-2000 Public notification date: 20/10-2000 Problem: I found a buffer overflow in the Intel InBusiness eMail Station, which can enable an attacker to execute...

Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure

source: https://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By sending a number of requests to enter passive ftp mode PASV during ...

cabletron.ssr.dos.txt

Bindview Security Advisory -------- Cabletron SmartSwitch Router 8000 Firmware v2.x Issue date: November 24, 1999 Contact: Scott Blake Topic: Denial of Service Vulnerability in Cabletron's SmartSwitch Router SSR Overview: Cabletron's SSR is a Layers 2-4 routing and switching device with one of th...