Default credentials

Cisco Network Services CNS NetFlow Collection Engine NFC before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system...

CVE-2007-2282

Cisco NetFlow Collection Engine (NFC) before version 6.0 is affected by a default credentials issue: the nfcuser account uses a default password, allowing remote attackers to modify NFC configuration and, on Linux, gain login access to the host OS. This is due to default accounts in NFC prior to ...

Cisco NetFlow Collection Engine contains known default passwords

Overview A vulnerability in the Cisco NetFlow Collection Engine could allow a remote attacker to gain access to a vulnerable system. Description The Cisco Network Services CNS NetFlow Collection Engine NFC is a software package for supported UNIX platforms and is used to collect and monitor NetFl...

Default Passwords in NetFlow Collection Engine

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Network Services NetFlow Collection Engine default account

Account with hardcoded password is used for NetFlow information gathering...

Cisco Security Advisory: Default Passwords in NetFlow Collection Engine

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Default Passwords in NetFlow Collection Engine Advisory ID: cisco-sa-20070425-nfc http://www.cisco.com/warp/public/707/cisco-sa-20070425-nfc.shtml Revision 1.0 For Public Release 2007 April 25 1600 UTC GMT -...

CVE-2005-3522

Cross-site scripting XSS vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter...

CVE-2005-3522

Cross-site scripting XSS vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter...

CVE-2005-3522

CVE-2005-3522 affects ManageEngine Netflow Analyzer 4.0.2. The vulnerability is a reflected cross-site scripting (XSS) in index.jsp via the grDisp parameter, allowing an attacker to inject arbitrary web script or HTML. The provided documents do not specify the exact root cause code path, versions...

NetFlow Analyzer 4 XSS Vulnerability

NetFlow Analyzer 4 http://manageengine.adventnet.com/products/netflow/ I encountered Cross Site Scripting Vulnerabilities in some files of the NetFlow Analyzer 4, with this files, sending a specially crafted url you can execute commands in the client side. Proof of Concept...

NetFlow Analyzer 4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15127/info NetFlow Analyzer 4 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

NetFlow Analyzer 4 - Cross-Site Scripting

NetFlow Analyzer 4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15127/info NetFlow Analyzer 4 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...

Cisco NetFlow Agent Detection

Binary data 3159.prm...

security flaw

Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 NetFlow, 2 IGAP, 3 EIGRP, 4 PGM, 5 IrDA, 6 BGP, 7 ISUP, or 8 TCAP dissectors...

CVE-2004-0176

CVE-2004-0176 affects Ethereal 0.8.13–0.10.2; multiple buffer overflows in NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, TCAP dissectors allow remote attackers to cause denial of service and possibly execute arbitrary code via crafted packets. The connected documents provide concrete details on aff...

Ethereal fails to properly parse NetFlow UDP packets with an overly large template_entry count

Overview Ethereal fails to properly parse v9template structures in NetFlow UDP packets with an overly large templateentry count. This could allow an attacker to execute arbitrary code. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing...

multiple vulnerabilities in ethereal

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including: NetFlow IGAP EIGRP PGM IRDA BGP ISUP TCAP UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited vulnerability...