1821 matches found
Linksys phone adapter denial of service
Linksys phone adapter denial of service Product Information Product Name: SPA-2102 Serial Number: FM500G582390 Software Version: 3.3.6 Hardware Version: 1.2.5a Another device hit with the PoD! ping -l 65500 192.168.0.1 Only seems to work on the internal network. discovered by sipher...
Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials
Title: Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials Vendor: Beehive Software Vendor URL: http://www.thebeehive.com/ Affected File: http://host/sfcommon/SendFile.jar Vendor Contact Date: 7/26/2007 Vendor Response: None Workaround: The simplest way to protect against...
sip-pwn.txt
SIP, the IETF endorsed VoIP signaling protocol, is currently used to establish and manage VoIP calls. Many security issues have been addressed until know about the security of VoIP due to the large numbers of attacks coming from the traditional IP networks, but none have addressed the securing th...
A comprehensive analysis of the firewall and the firewall of penetration-vulnerability warning-the black bar safety net
A firewall description A firewall is a function, it makes the internal network and the external network or the Internet, isolated from each other, in order to protect the internal network or host. A simple firewall may consist of Router,3 Layer Switch ACL access control list to act as, you can al...
Get cuteftp of ssh password-vulnerability warning-the black bar safety net
Yesterday to take to an administrator of the machine, the analysis above him the file in the Application Data directory to find the cuteftp dat file, and quickly. import into cuteftp get the password, the above is all within the network ip of the ftp connection, the network is a large network...
3APA3A : Frontend applications security
May 30, 2002| Client software security. 1. Introduction. Usually, when talking about attacks via the Internet and related risks, they mean the security of the mail server, the Web Server and other corporate Internet services. To ensure corporate security Internet services are usually placed in a...
Large enterprises within the network penetration of the common software has a breaking point-vulnerability warning-the black bar safety net
Some enterprise-level network, especially in Europe and the United States of large companies, the network structure of the General characteristics is the dmz Zone and the internal network is substantially isolated from the domain into the clear, the permissions are set meticulous and strict,...
Citrix Access Gateway LDAP authentication bypass
Overview An error with LDAP authentication in Citrix Access Gateway appliances may allow an attacker to successfully authenticate without providing correct login credentials. Description Citrix Access Gateway appliances use SSL VPN technology to give remote users secure access shared resources...
MAC address and IP address binding policy of hack-vulnerability warning-the black bar safety net
1 Introduction On the“IP address theft”solutions, the vast majority are taking MAC and IP address binding policy, this practice is very dangerous, this article will this problem be explored. Here need to declare that this article is in the pairs of MAC and IP address binding policy security...
JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net
Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...
Htran the network within the broiler made into a SOCKS5 proxy-vulnerability warning-the black bar safety net
Conditions:broilers two. A station in the internal network. A station in the public network. First of all at that Station within the network of broilers on the run CMD..execute.. htran.exe -install //to install socket5 service htran-start //start Start a socket5 service,proxy default port is 8 0 ...
Delta UPS Daemon Detection
The Delta UPS Daemon is running on this server. This UPS provides a daemon that shows sensitive information, including: - OS type and version - Internal network addresses - Internal numbers used for pager - Encrypted password - Latest event log of the machine. SPDX-FileCopyrightText: 2002...
Within the network database server invasion combat-vulnerability warning-the black bar safety net
Takeaway: deal with server the internal network and the external does not open the port of the database server, in addition to the bounce the Port to get a shell, there's no other good way to Do all in cmd,too much trouble, inconvenient we penetrate further within the network, following by a site...
602LAN SUITE Open Telnet Proxy
The remote host is running 602LAN SUITE with an open Telnet server proxy. By using through such a proxy, an attacker may be able to launch attacks that appear to originate from the remote host and possibly to access resources that are only available to machines on the same internal network as the...
BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure
source: https://www.securityfocus.com/bid/10589/info BT Voyager 2000 Wireless ADSL Router is reported prone to a sensitive information disclosure vulnerability. It is reported that 'public' SNMP MIB community strings which, are world readable by default contain sensitive information pertaining to...
Zonet NAT problem
During translation to internal network IP address is overwritten with internal IP of the router...
Cisco VPN 3000 Concentrator may allow access to internal hosts when IPsec over TCP is enabled
Overview A vulnerability in some Cisco Virtual Private Network VPN products could allow a remote attacker to access systems that should not be accessible. Description The Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Clients are Virtual Private Network VPN platforms designed...
SRT2003-06-12-0853 - ike-scan local root format string issue
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
AdSubtract Proxy ACL Bypass Vulnerability
AdSubtract Proxy ACL Bypass Vulnerability URL http://www.lurhq.com/advisory20030604.html Release Date June 4, 2003 Author Joe Stewart About AdSubtract AdSubtract is one of the leading products in the banner-ad blocking software market. It is frequently bundled with modems from several leading...
Linksys BEFVP4 - SNMP Community String Information Disclosure
Linksys BEFVP4 - SNMP Community String Information Disclosure source: https://www.securityfocus.com/bid/7317/info Linksys BEFVP4 VPN router has been reported prone to a sensitive information disclosure vulnerability. It has been reported that SNMP community strings which, are world readble by...