442 matches found
OSPF LSA Manipulation Vulnerability in Cisco IOS (cisco-sa-20130801-lsaospf)
The remote Cisco IOS device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could be exploited by injecting specially crafted OSPF packets. Successful exploitation could allow an unauthenticated...
OSPF LSA Manipulation Vulnerability in Cisco NX-OS (cisco-sa-20130801-lsaospf)
The remote Cisco NX-OS device is affected by a vulnerability involving the Open Shortest Path First OSPF routing protocol Link State Advertisement LSA database. By injecting specially crafted OSPF packets, an unauthenticated attacker could manipulate or disrupt the flow of network traffic through...
Cisco OSPF LSA Manipulation Denial of Service (CVE-2013-0149)
A denial of service vulnerability has been reported in Multiple Cisco Products...
Information disclosure
The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...
CVE-2013-4806
The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...
CVE-2013-4806: Undefined Security Weakness
The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...
Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability
LSA packet routing table manipulation...
Design/Logic Flaw
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...
Cisco Releases Multiple Security Advisories
Cisco has released three security advisories to address multiple vulnerabilities. These vulnerabilities may allow an attacker to take control of the affected system or allow an authenticated but unprivileged, remote attacker to execute arbitrary code on a vulnerable system and on devices managed ...
CVE-2013-0149: Undefined Security Weakness
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...
Open Shortest Path First (OSPF) Protocol does not specify unique LSA lookup identifiers
Overview The Open Shortest Path First OSPF protocol does not specify unique Link State Advertisement LSA lookup identifiers, which allow an attacker to intercept traffic or conduct a Denial of Service DoS attack. Description CWE-694: Use of Multiple Resources with a Duplicate Identifier The OSPF...
OSPF LSA Manipulation Vulnerability in Multiple Cisco Products
Multiple Cisco products are affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could allow an unauthenticated attacker to take full control of the OSPF Autonomous System AS domain routing table,...
Samba SetInformationPolicy AuditEventsInfo Heap Overflow (CVE-2012-1182)
A heap overflow vulnerability has been reported in Samba daemon. The vulnerability is due to an error on the PIDL auto-generated code in the LSA RPC service of the Samba daemon. Remote attackers could exploit this vulnerability by making a specially crafted call to SetInformationPolicy to set a...
Windows 7/8 admin account installation password stored in the clear in LSA Secrets
---------------------------------- Bug title: Windows 7/8 admin account installation password stored in the clear in LSA Secrets Affected systems: Windows 7, 8 related issue on XP Author: Xavier CC ---------------------------------- Background: ---------------------------------- "Windows LSA...
Nmap NSE 6.01: smb-enum-users
Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see 'smb.lua'. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpfu...
Nmap NSE 6.01: smb-enum-groups
Obtains a list of groups from the remote Windows system, as well as a list of the group's users. This works similarly to 'enum.exe' with the '/G' switch. The following MSRPC functions in SAMR are used to find a list of groups and the RIDs of their users. Keep in mind that MSRPC refers to groups a...
36 Windows Tools For Penetration Testing
Most penetration testers are using either a Mac or a Linux-based platform in order to perform their penetration testing activities.However it is always a good practice to have and a Windows virtual machine with some tools ready to be used for the engagement.The reason for this is that although...
Samba 3.4.16/3.5.14/3.6.4 - SetInformationPolicy AuditEventsInfo Heap Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Samba SetInformationPolicy...
Samba SetInformationPolicy AuditEventsInfo Heap Overflow
Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Samba SetInformationPolicy AuditEventsInfo Heap Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Samba SetInformationPolicy...