712 matches found
Linux Kernel 2.0.x2.2.x2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure
Linux Kernel 2.0.x2.2.x2.4.x FreeBSD 4.x - Network Device Driver Frame Padding Information Disclosure source: https://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are small...
CVE-2006-5213
Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation network device aggregation...
[VulnWatch] iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability
Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 January 17, 2006 I. BACKGROUND Cisco IOS Software is the world's leading network infrastructure software,...
SureCom EP-9510AX/EP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service (2)
// source: https://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service to legitimate users of a...
Cisco IOS Malformed IPv4 Packet Remote DoS
According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6. C Tenable Networ...
3Com TelnetD
I noticed that there are infinity retries and no delay enabled at 3Com hardware, so I wrote this little Telnetcracker for this problem. I send it to 3Com, but I think they weren't bothered much about that. They sended me a notice to provide hardware serial and my name etc. ....strange... = This...
CVE-1999-0507
An account on a router, firewall, or other network device has a guessable password...
CVE-1999-0508
An account on a router, firewall, or other network device has a default, null, blank, or missing password...
Ascend CascadeView/UX 1.0 tftpd - Symbolic Link
source: https://www.securityfocus.com/bid/910/info The tftpd bundled with CascadeView for Ascend's B-STDX 8000/9000 network devices creates a log in /tmp called tftpdxferstatus.log. If /tmp/tftpdxferstatus.log already exists as a symbolic link, tftpd will follow it and overwrite any data it point...
CVE-1999-0507
An account on a router, firewall, or other network device has a guessable password...
PT-1998-1093 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an account on a network device, such as a router or firewall, that has a password which can be easily guessed. Recommendations: At the moment, there is no...
CVE-2023-47005
Concrete details link a vulnerability to ASUS RT-AX57 (PT-2023-7096): version 3.0.0.4 386 52041 is affected. The issue arises from insufficient input validation in the sub ln 2C318 function of the router’s microprogram, enabling a remote attacker to execute arbitrary code by crafting a request to...