3986 matches found
Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting
source: https://www.securityfocus.com/bid/9777/info It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI. Attackers may exploit this vulnerabilit...
Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage
source: https://www.securityfocus.com/bid/8700/info A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially sensitive information. http://www.example.com/mail/S030904L.LOG...
Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage
Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage source: https://www.securityfocus.com/bid/8700/info A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentiall...
Yak! 2.0.1 file trasfer exploit
http://www.digicraft.com.au/yak/ yak 2.0.1 is a software for chattin in lan environment for windows it supports file transfers. the default port it listens is 3535. connecting at 3535 telnet localhost 3535 gives up nice : " 220 ICS FTP Server ready. " meaning for file transfers ftp is being used...
Cisco Aironet AP1100 fails to provide universal login error messages thereby disclosing validity of user account
Overview A vulnerability in the Cisco Aironet 1100 Series Access Point may allow a remote attacker to discover valid accounts on the access point. Description Cisco describes the Aironet 1100 Series Access Point as, "an affordable and upgradable 802.11b wireless LAN WLAN solution, setting the...
CVE-2003-0126
The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blank password, which could allow attackers on the LAN side to conduct unauthorized activities...
Cisco VPN 3000 Concentrator LAN-to-LAN IPSEC Tunnel Connection Termination DoS (CSCdx54675)
The remote VPN concentrator is subject to a LAN-to-LAN IPSEC tunnel vulnerability which allows remote attackers to cause a denial of service. Existing associations might be removed when a new connection is made and no check is done in order to determine if the connection comes from the proper...
CVE-2002-1928
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "" tilde or ".bak" extension...
[SECURITY] [DSA 214-1] New kdentwork packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 214-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2002 http://www.debian.org/security/faq -...
[SNS Advisory No.60] Windows XP Disclosure of Registered AP Information
-------------------------------------------------------------------------- SNS Advisory No.60 Windows XP Disclosure of Registered AP Information Problem first discovered: 30 Aug 2002 Published: 4 Dec 2002 http://www.lac.co.jp/security/english/snsadve/60e.html...
CVE-2001-1451
Memory leak in the SNMP LAN Manager LANMAN MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service memory consumption via a large number of GET or GETNEXT requests...
CVE-2002-1102
The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to...
CVE-2002-0438
CVE-2002-0438 affects ZyXEL ZyWALL 10; firmware versions before 3.50 are vulnerable to a crafted ARP packet using the firewall’s IP and a malformed MAC, causing the firewall to disable its LAN interface (DoS). The referenced fix is a ZyWALL 10 firmware update to 3.50 (or newer). If exploitation d...
SonicWALL SOHO3 6.3 - Content Blocking Script Injection
source: https://www.securityfocus.com/bid/4755/info The Sonicwall SOHO3 is an Internet security appliance that provides firewall security solutions. Reportedly, a vulnerability exists in the product that allows for a script injection attack to be launched from a malicious user within the internal...
Sonicwall SOHO Content Blocking Script Injection, LogFile Denial of Service
This advisory may be reproduced unmodified. Sonicwall SOHO Content Blocking Script Injection and Logfile DoS Test Unit : Sonicwall SOHO3 Firmware version: 6.3.0.0 ROM version: 5.0.1.0 Severity : Medium Issue : Sonicwall Allows administrators to block websites based on a user entered list of...
CVE-2001-1220
CVE-2001-1220 affects the D-Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The root cause is storing the administrative password in plaintext in the default Management Information Base (MIB), allowing remote attackers to gain administrative privileges. No remediation details...
CVE-2001-1221
The CVE-2001-1221 entry affects D‑Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The issue is use of a default SNMP community string 'public', allowing remote attackers to obtain sensitive information. The provided documents do not specify affected versions beyond the listed...
ZyXEL ZyWALL10 DoS
vendor status About half a year ago I found a 'funny' DoS condition in the ZyWALL10. ZyXEL was informed, and they at least confirmed the bug, but i believe that's all i heard. According to www.zyxel.com a new firmware for the ZyWALL10 was released 2002/01/10 - i wrote an email to a ZyXEL employee...
