CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

CVE-2002-0797

Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges...

CVE-2002-0797

CVE-2002-0797 : The vulnerability affects Solaris 5.6–8 running the MIB parsing component of mibiisa. A buffer overflow in this component may allow a remote attacker to gain root privileges. The issue is documented in NVD/Nessus references as a remote overflow potentially enabling a root shell. N...

CVE-2002-0797

Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges...

CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications DOCSIS standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings...

CVE-2001-1220

CVE-2001-1220 affects the D-Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The root cause is storing the administrative password in plaintext in the default Management Information Base (MIB), allowing remote attackers to gain administrative privileges. No remediation details...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

Проблемы в SNMP Cisco/Olicom/3Com (ILMI SNMP community)

Неоторые MIB-группы могут быть прочитаны/изменены с исопльзованием недокументированного SNMP-community ILMI и др.. Кроме того, могут "оживать" удаленные community...

CVE-1999-1513

CVE-1999-1513 affects a 3Com SuperStack II hub running software version 2.10. The vulnerability centers on a read-only MIB object (.1.3.6.1.4.1.43.10.4.2) that exposes the entire table of community strings, potentially enabling unauthorized activities. The available public description confirms th...

CVE-1999-1513

Management information base MIB for a 3Com SuperStack II hub running software version 2.10 contains an object identifier .1.3.6.1.4.1.43.10.4.2 that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized...

CVE-2001-0352

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via 1 dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or 2 ap128bWepKeyValue i...

PT-2001-1575 · 3Com +1 · 3Com Airconnect Ap-4111 +1

Name of the Vulnerable Software and Affected Versions: 3Com AirConnect AP-4111 Symbol 41X1 Access Point Description: The issue allows remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only. This can be done via the dot11WEPDefaultKeyValue in...

Cisco IOS 11.x12.0 - ILMI SNMP Community String

Cisco IOS 11.x12.0 - ILMI SNMP Community String source: https://www.securityfocus.com/bid/2427/info IOS is the operating system designed for various Cisco devices. It is maintained and distributed by Cisco systems. A problem in the versions of IOS 11.x and 12.0 could allow unauthorized access to...

Cisco IOS 11.x/12.0 - ILMI SNMP Community String

source: https://www.securityfocus.com/bid/2427/info IOS is the operating system designed for various Cisco devices. It is maintained and distributed by Cisco systems. A problem in the versions of IOS 11.x and 12.0 could allow unauthorized access to certain configuration variables within a Cisco...

CVE-2000-0955

CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...

CVE-2000-0955

Cisco Virtual Central Office 4000 VCO/4K uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges...

CVE-1999-0254

CVE-1999-0254 relates to HP OpenView and describes a hidden SNMP community string vulnerability. A remote attacker could exploit this via SNMP to modify MIB tables and obtain sensitive information, with network access and no authentication required. The NVD entry records a CVSSv2 base score of 10...

vacm.ucd-snmp.txt

Date: Tue, 6 Apr 1999 03:09:55 -0800 From: + + To: [email protected] Subject: ucd snmp vacm's public community access auth probs? I have found a feature in the vacm ucd-snmp v3.52 and v3.6, when setting up snmp services under Linux RH 5.2. By default, v3.5.2 always delivers the system mib...

sun-snmp.txt

Vulnerabilities in Sun Solaris 2.6 SNMP Jeremy Rauch April 1998 Sun's snmpd implementation as supplied with Solaris 2.6 includes what used to be shipped with Sun's Solstice Admin suite as it's snmpd, and associated subagents. Sun's snmpd is actually pretty interesting, in that it supports a numbe...

PT-1998-1045 · Hewlett Packard · Hp Openview

Name of the Vulnerable Software and Affected Versions: HP OpenView affected versions not specified Description: A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. Recommendations: At the moment, there is no information abou...